skysight-inc/HackerNews huggingface dataset:
> You are misrepresenting Sentry pretty heavily here.

instead of generalizing and claiming that this is a misrepresentation why not engaging with my specific points that make it abundantly clear where the problems are?

> It's an old crash reporting system

there is nothing "old" about sentry. it's new tech using old (outdated) means to monitor an application crash. Your comment is at best ill-informed and at worst whataboutism because most fortune-500 companies in their list do not use on-premise Sentry but their SaaS service. So getting pwned with sentry is not a question of if but when.

Meanwhile my post has been flagged which is normal considering that several sentry employees are on HN with high karma. That doesn't change how dangerous the ideas are that they are peddling. And I'm not talking about the wannabe-FOSS (but technically not really FOSS) on-premise service. My beef is with how they commercialize this via a SaaS (recurring revenue / subscription model) when the whole thing should be a bash 3 liner written by your friendly internal sysadmin.

This post and the fact it got flagged into oblivion will be used as an "I told you so" the moment the first fortune-500 companies gets hacked via Sentry. It's not a question of if but when considering their authentication and roles are split across 2 continents and 3 countries already and there isn't any strategy for the existing 200+ engineers on how to access highly sensitive customer information and (accidentally leaked) 2nd party PII.
BSL-2 is a lot more than "wear a lab coat". If it was just that, there'd be no BSL-1. BSL-2 usually also means doing work in a biosafety cabinet and sterilizing disposals, although the controls employed vary depending on the hazards specific to the actual work being done. If you're interested, Yale lays it out in 200 pages of detail: https://ehs.yale.edu/sites/default/files/files/biosafety-man...
what I mean is, take any arbitrary patch thread off the front page of https://public-inbox.org/git/ and look at how people review them. they reply to the relevant commit. if you reply to the cover letter it's not a code review at all, but a more general comment on the whole branch (e.g., "do we want this feature" or something).

you definitely don't send your branch as a single patch (unless it is small and really is best expressed as a single patch). if you did you would be asked to break it up.
That still doesn't address my concern. I cannot test my S3 implementation without either mocks or a very specific emulator of the protocol. AWS happens to be popular enough that some libraries exist to do the latter, but I assert this is the exception rather than the rule for external integrations. You shouldn't be checking in code without at least some unit testing along for the ride, mocks or otherwise. It is indeed no substitute for integration testing, but it can certainly help catch bugs sooner rather than later.
Does e.g. the new Ryzen 7 5800U part support ECC?
Fintech Startups to keep an eye on in 2021
American cities (suburbs) are designed for cars, and for cars to be profitable for auto makers and oil companies.
It's simple compared to modern machine learning, but linear programming [1] was initially developed by Leonid Kantorovich partly with the goal of automating central planning. Most of his ideas weren't implemented in practice though.

Here's a recent paper surveying some of that work and how one might approach the central allocation problem with the benefit of modern techniques: https://arxiv.org/abs/2005.01539

[1] https://en.wikipedia.org/wiki/Linear_programming
> Does your statement become "Our government should not be in the business of regulating the distribution of a sequence of words"?

Yes. Your lungs is a tree that needs healthy air. Your brain is a tree that needs healthy ideas. When people are not free to clean the ideawaves, they fill with pollution, and that is where we find ourselves.
It's your personal duty to report the violations you claim to know about. Blow that whistle. Otherwise, you're accessory.
Have you used the latest iteration of Blender? The UI is about two orders of magnitude less user hostile now. It's like three clicks to create a scene such as you described. I hated the previous UI:s but now the whole system in Blender is really coming together.
Pico-8 API Cheatsheet
AWS EC2 Hardware Trends: 2015-2021
> If you have good knowledge of the economy and of production mechanisms you can simply not do anything that could cause a crash

But we don't have that knowledge. Economists disagree on many foundational questions. At some point, economics shades into psychology and we certainly don't have theories that predict human behavior.

I don't discount the possibility that knowledge can help economies run more smoothly but you're understating the difficulty here.

> Empirically the USSR had a single economic crisis without exogenous cause which was caused by incorrect accounting of agricultural production at its heart.

The idea that the USSR had one economic crisis is a bizarre joke. The only way you can justify this comment is to ignore all the shortages and poverty and make some tortured semantic argument about what constitutes a "crisis".

Empirically speaking, free markets trounced centrally planned economies in the 20th century. If you can't recognize that, I'm not sure why anyone would take you seriously.
Those two are many orders of magnitude apart, undetected bit flips in spite of ECC are a fact or life in any large computing installation.
Not sure what you mean with "safety critical". I made no such assumption. Also since the topic is about a (write-only) log it probably doesn't need such low latency. What it more likely needed is final states so once a entry is made and accepted it must be final and ofc correct. DLTs can do this distributed and self-fixing i.e. a node that tries to add fault data is overruled and can never get a confirmation for a final state that later would not be valid.

Getting the whole decentral system to "agree" will never be fast unless we have quantum tech. There is simply no way servers around the glob could communicate in microseconds even if all communication would be the speed of light and processing would be instant. It would still take time.
In reality such system need seconds which is often totally fine. As long as everyone only relies on the data that has been declared final.
Maybe 2D vector animation?
That’s the funny thing about Blender. Beginner tutorials are painfully slow for anyone who’s anyway familiar with the software. These videos and those by CG matter adopt this really fast style be use that how the work flow goes.
> all that was needed to overcome falsehoods and manipulation

All that is needed is honest discourse and a good educational system.

But what twaddlevision did to US society in the pre-WWW period, social memia is now doing to subsequent generations.

The circle is unbroken. ^_^
There was a little of that too, for example SIZ, SPIS and CENPLAN. They were introduced partially and never functioned as designed of course, after all it was a communist country :)

If you can read Polish here are some references:

https://webcache.googleusercontent.com/search?q=cache:H9O7Cs...

https://bcpw.bg.pw.edu.pl/Content/1720/PDF/16atibz_krajowy.p...
Blender has gone from being a tool professionals scoffed at to one that professionals are stressing over themselves to learn by binging tutorials. It is quite the sight, I remember in 2008 wanting to get into game development and being poopooed on forums from picking up blender and instead pirating maya instead. I obviously dropped the idea completely because of it.

Idk, I think there might be a larger lesson somewhere in there but regardless it's amazing to see the shift that has occurred.
Not recommended to use "nonce" casually in the UK. Urban Dictionary will tell you why.
I was speaking from a UK perspective which, as another commenter says, is mostly co-ax from a point on the pavement. 'Actual' FTTP is coming in now, like HyperOptic, starting with apartment blocks where they can get lots of customers per one new civil engineering job. Most consumer telecoms fibre networks in the UK were laid in the 90s and don't go right to the home.

If you're in the lucky situation of having true FTTP, then it's still very unlikely such fibre could be used as a 'microphone' because of the sensitivity and spatial resolution issues. It would also be pretty obvious it was being used because it would probably interfere unless they were very careful with bands. So don't worry, DAS isn't going to be used to listen to your voice. Much easier to do that with your phone!
It wasn't measured emperically as we're not very worried about that aspect. Still, the author of Ziglyph, jecolon, did some rudimentary comparisons and found it was equal and sometimes better by a few milliseconds.

I suspect the size of the file being much smaller means in practice it now often fits in L1 cache during decompression, so that's probably counteracting the time spent decompressing.

It also helps that the algorithm is able to rely on the files already being well sorted, making it a pretty linear process to compress.
Is this possible for a guy with no previous compiler experience to join?
There was never an automated price selection and planning system, no. It was done by hand on manually generated data in a handful of industries.
It takes a lot more to get back, though—Mars is a deeper gravity well (5 km/s escape velocity versus 2.4 km/s for the Moon). Then you are spending hundreds of days on the return journey, versus a week or less from the Moon. And humans are definitely going to want to come back, because to stay on Mars is to be doomed to radiation poisoning, and not on long timescales.

"Recent data from ExoMars Trace Gas Orbiter showed that on a six-month journey to the Red Planet an astronaut could be exposed to at least 60% of the total radiation dose limit recommended for their entire career."[0]

Maybe for robots, but I think human colonization of Mars without first mastering the Moon is very unlikely.

[0] https://www.esa.int/Science_Exploration/Human_and_Robotic_Ex...
Model T wasn’t the first car. It was the first mass-market, “Everyman” car. What I’m talking about is a car that pretty much anyone who can afford a car can afford.
On the other hand though it could be argued that a 5-line snippet used in a novel context and/or modified is fair use.
> training ML models is fair use

In what context? You are planning on commercializing Copilot and in that case the calculus on whether or not using copyright protected material for your own benefit changes drastically.
So the compiler cannot always optimize...
The only real case I use switch fallthrough for is when you have two cases with the same code, e.g.:

switch (foo) {
case 1:
case 2:
/* common body */
break;
case 3:
/* body 3 */
break;
}

It's not cognitively hard to make an empty case body fallthrough to the next run, but include an implicit break at the end of every nontrivial body.

Supporting Duff's Device is not a compelling feature to support--irreducible loops are basically going to destroy any hope of optimization you might accrue.
On the other hand, it seems the move to self-driving electrical vehicles would be welcomed by alternatively-abled people that suffer from visual, motor, or gender-impairment.
The Art of Online Conversations
My wheelchair bound friend would never be able to afford a car even if he could drive it. All cars and car dependent infrastructure makes his life more difficult. He takes the bus or the bike lane, and neither option is very good.
There are some really good YouTubers that do great tutorials that are fully up to date. A lot of them might not be entirely child friendly (sweary language) depending on your daughter’s age.
ROFLMAO! Let us all know how many beers you get outta that, yo! I'm genuinely curious. ;)
Show up to all meetings early. This gives you an opportunity to banter with people who are also early. The 1-2 minutes allow for easy chitchat so you can get to know your coworkers.

Make sure you’ve got a good microphone. It’s the primary communication channel between you and your coworkers and the better you sound the easier it is to connect.
Roman et al. has serious errors cf.

https://twitter.com/BIRDGroupUK/status/1409899999308259332
a third system?
Depends on the system. In this case it seems like retries are possible after a failure, so two is sufficient to detect bad data. You need three in real time situations where you don't have the capability to go back and figure it out.
The HTML nonce attribute is a string: https://developer.mozilla.org/en-US/docs/Web/HTML/Global_att...
It's entirely about income. If you have a greater income, you can afford a house with enough property to have or plant trees. This is not complicated.
Hi @hanniabu.. it's based on bootstrap 5. You can check in our free version :)
You like security vulnerabilities? I don’t think we are talking about the same thing at all. It’s perfectly easy to make Rust “crash” or log errors when it does the wrong thing, and to write unit tests for it.

Memory errors and threading bugs are never ever something you want.
Back in 2012 I observed exactly the same thing. I actually managed to get a warning for this added to Clang, called -Wmissing-variable-declarations. When set, warnings are generated in case a non-static global variable is defined without an external declaration that precedes it.

I worked on this as part of FreeBSD, which is why their base system is nowadays built with that flag enabled.
The USSR was unaffected by the Great Depression, unlike all capitalist countries. It’s because it used planning for use instead of markets for profit.
NIMBY does not mean conservative. Indeed, one of the most annoying things about NIMBYs is that they come in all political shapes and sizes. :)
Yep, and he did a very bad job at it (and so do you) if the goal was to change my mind. Do you maybe have arguments?
I think my brain is working hardest either in the shower or in the early morning just before waking up.

Why?
Because my best ideas for work(!) typically appears at these ‘non-working’ times.

How to balance this - I don’t know… The ideas ‘just’ arrive at that time, likely because the mind is relaxed and ‘subconsciously’ is working harder than while ‘actively’ working.

The ideas are then refined and implemented during normal business hours.

PS.: There’s a lot of positive talk about the so-called ‘four day work week’.

I have tried burning the midnight oil, it’s only feasible for short periods of time, so I do not believe that hard work === many hours!
Two hosts is efficient. Do it twice on two different hosts and then compare the results. If there is a mismatch, throw it away and redo it again on 2 hosts. A total of
4 computations are needed. But only if the difference really was due to bit flips, the chance of which are exceedingly rare.
In all the rest of the cases, you get away with two instead of three computations.
I don't get it, the religious right has perfected boycotting over the last 50 years. Starting with burning records of the Beetles because John Lennon said they're bigger than Jesus and moving to burning disco albums. In the 90s the AFA said as long as Waldenbooks sells porn we'll boycott Kmart, the then owner of Waldenbooks. They've boycotted Disney, the Dixie Chicks, Target, French Fries, the Teletubbies, JCPenny's because of Ellen, to one of their own, Rob Bell, for questioning if non-christians go to hell.

But when "them bleed'n heart liberals" do it, its called "cancel culture?" Why? Its a tactic that the right has been using for years but suddenly it bad form? This definition of cancel culture is bullshit. Everyone has always been free to choose from whom they wish to purchase goods and services, and boycotts have been weaponized by the right for practically the last century. As much as I've disagreed with many of the motivations for those boycotts, I've never disagreed with the freedom of speech they have to perform a boycott. Why is it suddenly bad just because the "radical antifa left" is doing it?
>If you chain blocks then a single bit flip in one block destroys all the blocks. I've seen companies like msps go out of business because they were doing crypto with consumer hardware.

If it is caused by a single bitflip you know the block in which that bitflip occurred and can try each bit until you find the right bit. This is an embarrassing parallel problem.
Let's say you need to search 1 GB space for a single bit flip. That only requires that you test 8 billion bit flips. Given the merklized nature of most crypto, you will probably be searching a space far smaller than 1 GB.

>Bit flips aren't an act of god you simply need a better computer.

Rather than using hardware ECC, you could implement ECC in software. I think hardware ECC is good idea, but you aren't screwed if you don't use it.

The big threat here is not the occasional random bit flips, but adversary caused targeted bit flips since adversaries can bit flip software state that won't cause detectable failures but will cause hard to detect security failures.
Also, CC0 etc. are not really called "permissive licenses", because they explicitly waive away any and all rights a license would entail. In the same way "off" isn't a TV channel.

Creative commons specifically calls CC0 an "alternative to our licenses" [1]

https://creativecommons.org/share-your-work/public-domain/cc...
The NASA study seems to be yet another vector to validate human-caused warming of climate. Validation is one thing, but also understanding exactly how and why we're moving away from an equilibrium vs core cycles, and what that may mean, may say something compelling.

We're like fleas on the back of a giant elephant, and it might help to reorient to gain clarity. Mind you, I don't bring answers, only unasked questions and some wonder.

The other thing is the enormous amount of geothermal energy, trapped beneath our feet. We may require energy, ie. to trap greenhouse gases and as replacement for fossile fuels.

https://www.greenandgrowing.org/how-long-does-carbon-dioxide...
Multiple examples provided in this article:

https://www.sightline.org/2017/09/21/yes-you-can-build-your-...
Thanks for the info. I had remembered something like a 17x number but that just seemed like my mind was misremembering.
We already know that plants will not survive in martian soil regardless of watering them. For the amount of effort/energy/consumables needed to turn martian soil into something that can grow plants, it would be easier to just send some soil. Or, skip all that and go totally hydroponic. Hydroponics makes economic sense here on earth already. On mars, hydroponics is exponentially easier than traditional farming methods.

The first habitats will probably not use any martian resources. First uses will probably be as construction materials. Then possibly as a fuel source. Those are the high-mass uses. Things like growing food/oxygen don't require much mass and so are far down the list.
I don't understand why you're comparing Audacity to Python. ffmpeg would be a much better comparison to emacs or python – and I admit I'd be surprised if ffmpeg was emitting telemetry like crash reports.

Audacity's more comparable peer would be Adobe Photoshop. I'd expect crash reports in a GUI app like either of these. I'd also expect that anyone with data on a server would need a clause like "data necessary for law enforcement".

I would not expect that law enforcement regularly hounds Adobe for data from crash reports.
The designs contain anti-patterns like centered text and carousel/sliders.
There seems to be a lot more interesting software on the Mac than Windows or Linux and I've never really understood that.

Think about how many Mac enthusiast podcasts, websites, and blogs there are. Windows should have many more of these, but they don't. And Linux enthusiast sites are very technical and low level. There's no writing about being a Linux user that isn't also about being a developer.

Where are there no companies like the Omni Goup, Cultured Code, and Panic turning out great applications for Windows? In theory, the market is an order of magnitude bigger yet the reality seems to be that there are fewer Windows users willing to pay for great software. Is it because Windows users are not on that platform by choice?

Desktop Linux users are definitely there by choice, yet they too seem to be unwilling to pay for software.
On the contrary, for remote APIs like this having commands return the resulting state is the only sane path; otherwise you get mandatory inefficiency (doubling latency) and race conditions.
This is not a best practice.

Detecting problems is finding a needle in a haystack.

If you want to be efficient at finding the needle in the haystack, you make the haystack smaller.

That is what code review is about. You do not scan the entire source code for defects, only the new code being added.

You can commit often to your own branch, and submit for code review once it's stable.
For linear programming I much preferred the Bertsimas/Tsitsiklis (Introduction to Linear Optimization). Not free, but if you look at the first couple Google result you may get nice surprises.
People study the Holocaust all the time. Instead we should study the Rwandan genocide. It’s the best model of what a modern genocide might look like.
This is not related to replay. This is just a rate limiting issue. Throwing arbitrary auth mechanisms between the server and the client like that just means they need to make more requests per fulfilled request.

The client is authorised to make the request – it would only be a replay attack if the client were not authorised to make the request and that limitation was bypassed by capturing and then replaying it.

if you can replay the same captcha challenge over and over your captcha is broken.
The evidence you provided was for strawman arguments, something you accused me of. I'm sure Smalltalk can be easier / more "productive" than Haskell, but I never made any claims about Haskell. I'm sure many static type systems are bad, but it doesn't prove all are bad. You didn't provide evidence to address any of my specific issues with OOP, e.g. pervasive mutable and hidden state is an impediment to composition.

For the record, I happen to really respect Fred Brooks, Alan Kay and a lot of what OOP has achieved (for example first-class modules). I called Brooks an "academic" as an acknowledgement that he has made big contributions, not as a putdown as you seem to imply.
You are trying to paint me as an FP zealot, but I use both and appreciate the best parts of both. It is you that are coming across as heavily biased. Even your domain name has "object" in it.

Enjoy your objects!
Companies are starting to behave as primary schools: let's start study groups! Let's do some tech talks! Let's do hackathons!

As a professional developer with some years of experience in this industry, I call this BS. Companies even put this kind of "events" in their job offers (as if that would attract people!). Let me do my job, if I need to collaborate with people of other teams, I will do so; if some knowledge "needs to be share", then I will do so... I don't need your support, company X.

Many of the people I have met in the past (senior engineers) consider these kind of events as huge red flag.
Paying taxes can only act as an incentive for governments to keep the population healthy if it costs them less than they'll get from that person in taxes - so if you're old, retired, or not able-bodied enough to work, well... (This kinda resembles how the NHS in the UK decides what treatments to fund if you squint, though that's not the official justification.) There's also a lot of pressure to fund treatments of dubious effectiveness for high-profile diseases like cancer which politicians tend to give into because they care about being re-elected, whilst unglamorous but quality-of-life affecting stuff like physical therapy gets deprioritized.
The real world answer is 99% of consumers carry a battery powered microphone and GPS beacon with remote telemetry, so there's no need.

Some also pay money to put internet connected microphones in their house.