skysight-inc/HackerNews huggingface dataset:
I think you have good points about the file signature and key-verification. I was hoping that we could expand the conversation around static analysis of library functionality as some languages offer features to simplify certain kinds of static analysis. For instance, Rust's borrowing semantics are a language feature that make certain memory usage attributes possible to verify statically.

From a run-time perspective, there are lots of instances where untrusted code has to be executed and there are various sandboxing related approaches there (running in a walled off-VM for instance). From a deployment standpoint that doesn't scale if you need to have an actual VMware instance running per package/dependency. My hope is that a language implemented over a virtual machine might be able to achieve similar levels of security with less overhead.
Facebook clearly demonstrated that people will say terrible things under their own name.
There's a USB-C Yubi 5 nano.

https://www.yubico.com/product/yubikey-5c-nano
He could easily have just acknowledged what happened and not sold all of his stocks to avoid insider trading while the nsa situation still happened. It's nice that he refused the nsa. Doesn't absolve him of other fraud.
Most compiled languages that have a minimal runtime need careful coding for memory safety. Rust attempts to solve this problem, at the expense of a huge initial learning curve.

Go compiles to a static binary, has great cross-compilation tooling, and provides a runtime with memory safety. But many programmers find Go's abstraction capabilities too primitive.

GraalVM provides an AOT compiler for Java [1]. In practice, this has proven to be a niche usecase [2].

[1] https://www.graalvm.org/reference-manual/native-image/

[2] https://openjdk.java.net/jeps/410
I used to do this but as I take on more tasks involving more names/faces and in an effort to separate my work and personal lives, I embraced the effort of 'book-keeping' as a way to braindump, a task written is a task I don't have to remember.
Malware Discovered in Popular NPM Package, ua-parser-JS
Its funny because Lambda School sent me (alumni) a test recently which was basically a wonderlic test.
Challenge accepted. We have belief systems. We have religions, imaginary system called money, imaginary organizations called companies. These systems are not something nature gives us, but we believe them to be as real as the air we breathe.

I can’t think of an animal that has belief systems that they share with each other. I agree with the argument in the book Sapiens, that these belief systems are what allow us to collaborate and trust individuals outside of our tribe.
I have always used a few since the days of the original version. On my experience they last until I drop them, crush them with some tool, or step over them.

The power supply tends to be much shorter lived. I severely oversize those and even then they like to stop working after just a few years. The SD card is the shortest lived component by far, but it lasts longer and has a better failure mode if you disable swap. (Why do pi distros enable swap at all?)

Oh, and of course, since version 3 the power cable is the hardest component to get right. You need a very good cable, and you probably don't even know the specs on most of the ones you have...
The point is that the photo was censored by a significant US search engine.

Also, let's not ignore that the CCP murdered somewhere between 300 and 10,000 Chinese citizens the day before he stood in front of the tank.
I grew up in France and I hate the PC French keyboard with Alt Grrr with a passion.
It sounds like they were able to save the paper work on top? That would make this story a lot better IMHO.

The intentions seem good and directed by a close relative controlling the estate.

The cheeky part of me thinks this is classic genius Mega behavior to 'unearth' or 'discover' a piece that would go for a hundred or maybe two hundred thousand dollars more (Hauser & Wirth).

Plus now they can upsell the 'original' work on paper! it's now a diptych ;) they'll send a PDF, no pricing, nothings available.

Love the last sentence of the article, the mad scramble of galleries, museums, collectors hoping to find a double freebie in their collection!
Imagine the founders' reaction if they heard a prominent senator saying that, not with regret, but exultantly, as though he relished the idea. I can't bring myself to accept that this was what they intended to launch into the world.
"Taxi service giant Hertz"?

also, duplicate: https://news.ycombinator.com/item?id=28987482
Really cool idea, I not sure the company has the credibility to pull of a NASA contract. But it should really, really be researched.
California is 2nd toughest place in U.S. to find a job
Same responsibility. Don't drive yourself home drunk!
Does the current administration follow SCOTUS rulings?

Edit: why am I being downvotes? The president explicitly stated his plan to ignore another SCOTUS ruling
Basically this a rather bleak assessment of world energy consumption and states that oil is practically irreplaceable (by anything) at current consumption levels by any measure of Nuclear or renewable forms of energy _and_ that we've only got about 40 more years of proven oil reserves.

> For example, it would require building 32,850 wind turbines or 52 nuclear power plants, each year for 50 years, to obtain in one year the amount of energy contained in one cubic mile of oil.
Of course, but TSMC pays its shareholders in money, not wafers, so money is the correct metric for influence.
what on earth is this trying to imply? That google bleached the internet? Google got rid of the don't be evil tagline because it didn't fit with their corporate mission anymore, which was objectively more boring and more profit driven.
That is probably true in most cases. Choose your poison.
I think this is an overly restrictive way to acquire information but I’m content with your taking your approach and my taking my approach and us ending where we will.
Maybe in some engineering/phd bubbles that's true, but that most definitely doesn't work the majority of the time.
>caches, job queues, etc.

This is over engineered? Yikes.
Thanks! Page 11 also has a good bit about scoping.
The Apple iPhone is already the top selling camera in the world. I don’t think they would really want to do anything to lose that title.
Do SIM apps really have direct access to the GPS?
TBH, I was incredibly disappointed when I discovered that BB shared the same encryption key for all users unless you were on their enterprise system. While I’m just one user, I also discouraged others from buying into them too.
What I meant is that you need a good separation of concerns for the microservices.

Each microservice is owned by a different team, so if you need to change something that touches 2 or more, you need to collaborate with other teams...this adds a lot of overhead. Not to mention that it becomes almost impossible to do real re-architecting: you can't really move data flows or code from one microservice to another. In my experience you're more likely to end up with duplicate flows, duplicate code, just because it's too damn hard to move "class X" from A to B. In a monolith you can and often do those kinds of changes.

It's also easier to have unit tests. It's easier to have integration tests that are still fast and self contained. Sure, you might say that unit tests are easy to write in any scenario but what I mean is maintaining them becomes easier, especially if you're doing Detroit style. It's easier to not break them when doing larger refactorings.
It is more interesting what their procedures are for getting data on citizens or any user for that matter, from FAANG.

And bonus question for what they do when they need to pull put bank statements.
> That tells me the car shouldn't be labeled as a killing machine since the road design bears the responsibility in this perspective.

I hear you. This is why most mature traffic safety and transit advocacy is about encouraging infrastructure changes, encouraging even traffic enforcement, and trying to add sensible legislation around vehicular responsibility (like alcohol rules and the like).

The problem is, car culture is a thing that exists in America (and many parts of the world of course), and that culture often actively embraces reckless acts like speeding, unsafe hauling, coal-rolling, or unsafe vehicle lifting. Car culture also often actively pushes back against efforts to make the roads safer like automated traffic enforcement or stricter licensing requirements, and leads to negative things like catcalling from cars. You don't have to take my word for it, just check out https://reddit.com/r/cars and look at the jokes and memes they say. I'm also willing to bet that the average subscriber of r/cars is a _safer_ driver than the average American driver because of their enthusiasm.

> This is untrue, there exist safety features that benefit occupants and non-occupants alike.

In theory. In practice, the numbers show that these safety features aren't enough.
It's easy to fall into the trap of thinking you need to make things complicated because it's the "correct" way to do something.

I once rewrote an internal tool that used AJAX requests to fetch data asynchronously for "performance"; the asynchronous fetches generally took 1-2 seconds because it had to use a super-slow API. The whole thing was a really weird mess of javascript, perl and Python and each component seemed to be tacked on to work around some issue (usually performance) with the other parts of the system.

My version ended up being a single file of terrible go code (it was my first go project) and a few templates. Everything is rendered server-side and directly does read-only queries to the source database, bypassing the horrendous API.

Of course, not using the API is "wrong" and liable to break at any time, but to this day the database schema has never changed such that that would have required me to rewrite the few bits of SQL I used, and the entire thing is fast enough that all user actions are effectively instant, even though the code is fully synchronous and does several database queries. Turns out databases are fast when you query them directly.

Writing that tool made me realize that I prefer writing "badly" engineered tools optimized to be disposable, so that I can scrap and rewrite them really quickly when I need to. Instead of thinking "what do I do if I need to extend this later?" I try to ask myself "How easily can I delete this code?"

I can better focus my effort on writing code that's reasonably performant and does not fail basic security when I don't really need to worry about whether the architecture is "good" or not, because as soon as I realize that it isn't, the bad part gets deleted and rewritten.

Of course, in larger systems you don't often have the luxury of doing full rewrites, but even then the principle is applicable to individual functions, modules, or whatever subcomponents your system has.
This really closes the loop. If the Feds cancelled contracts because of Nacchio's refusal to do business and then indicted him on fraud because he probably could not tell others that those contracts were cancelled (as with other similar wiretap/NSL requests)...

That seems like a colossal Catch-22.
Source control is not in the domain of computer science. You're thinking of software engineering. Many CS grads become software engineers (myself included) and we apply the concepts that we learn from CS in our jobs.

CS teaches us:

- How computers work (assembly, compilers)

- Logic and math (automata theory, set theory, numerical analysis)

- How to make computers do what we want (algorithms, data structures, performance)

If they taught you how to use subversion, that data might be useless by the time you graduate. Hopefully, the other stuff they taught you will make you able to better understand source control.
Without backing up your assertion, we're just talking past one another. Google the entity relies upon USG's system of laws for what it can and cannot do. Without Google (et al), USG would have a much harder time gathering information on citizens. That's symbiosis.

There is real downside to Google if it decided to go against USG's de facto interests, even if it technically has the de jure ability to do so. What is the upside? The only large company that has made an attempt to rebuke the general desires of USG is Apple, which has since backpedaled with its on device spyware.

Could this relationship be reformed through the little bit of leverage that US citizens have over USG? Perhaps. If you've got another concrete proposal aimed at doing do, then bring it up. But unless we're discussing a specific proposal, it's prudent for individual citizens to model the two as cooperating attackers rather than getting distracted with hopeful dichotomies such as "government" vs "private company".
Thanks for sharing your insights. With all kindness, this sounds like post-UnionPacific. The neo robber barons have won. To go on with the metaphor, not sure the future holds a car to fulfill point-to-point transportation demand, as our digital information needs are vastly oversupplied.

What kind of unmet demand you see out there?
Smartphones... yes. tvs are also an example. I have a flat screen from 2005 and one from this year. the weight difference is hard to believe.
Israel had already at that time even as a young nation esablished they were willing to use false flag operations, primarily in the Kind David hotel bombing and in the Lavon Affair.

These were intelligence agents spying on activities during a war between Israel and Egypt, Jordan and Syria, and they were told, no ordered, to keep their mouths shut about the incident. Their first hand knowledge cannot be so blithely and casually dismissed.

Regardless of your ad hominem attack on the survivors of the massacre, not only do the yet still classified and unreleased NSA tapes exist that will one day confirm, but more recently declassified Israeli cables that support the statement that Israel knew it was American and wanted to sink it on purpose:

"in a pair of diplomatic cables sent by the Israeli ambassador in Washington, Avraham Harman, to Foreign Minister Abba Eban in Tel Aviv.

Five days after the Liberty attack, Harman cabled Eban that a source the Israelis code-named "Hamlet" was reporting that the Americans had "clear proof that from a certain stage the pilot discovered the identity of the ship and continued the attack anyway."

Harman repeated the warning three days later, advising Eban, who is now dead, that the White House was "very angry," and that "the reason for this is that the Americans probably have findings showing that our pilots indeed knew that the ship was American."" [1]

Even beyond that, many people in a position to have first hand knowledge spoke to that effect, as can be seen in the rest of [1].

Furthermore, an even more covered up aspect of the story that lends credence to the "false flag" angle is this: according to the book Operation Cyanide: Why the Bombing of the USS Liberty Nearly Caused World War III [2], " at 8:45 a.m. EDT (2:45 p.m. off the coast of the Sinai Peninsula) on June 8, 1967 two A-4 bomber aircraft loaded with nuclear bombs were dispatched from the aircraft carrier USS America, bound for Cairo with orders to drop those bombs on that city."

As for your comment about UAT liberty transport vessel, the actual relevant tidbit to the original post, it was a different vessel altogether... which I didn't know, and hence me even bringing this topic up in the first place.

1. https://www.chicagotribune.com/chi-liberty_tuesoct02-story.h...

2. https://www.amazon.com/Operation-Cyanide-Bombing-Liberty-Nea...

bonus two more very informational books on the topic:

https://www.amazon.com/gp/product/B079WLV7HT

https://www.amazon.com/gp/product/B07281WLWL

Summary of Events: http://www.gtr5.com/summary_of_events.htm

Al Jazeera documentary" https://www.youtube.com/watch?v=tx72tAWVcoM
https://www.theatlantic.com/magazine/archive/2021/11/alden-g...
Overall I agree with you, but arminiusreturns was claiming that the USAT Liberty, the one at Bali, was a WWII transport, not the USS Liberty, the one Israel attacked.
Honestly this forced choice (either google is in bed with government or Raytheon et Al are) is just needless politicization.

Why don't we just condemn both? I mean... Google is going down the same path as the defense contractors and instead of stopping it from evolving into something like them, you're essentially arguing to look the other way
I'll continue using Firefox.
A combination of short seller punishment and an epic reality distortion field.
Anonymity doesn’t mean lack of accountability. There are ways to have both. Not hard.
Intro to HTML and CSS: An overview of web development and common terminology
Well, we sort of do. It's called social security. Now, you could argue that social security by itself only supports a pretty spartan lifestyle. But any UBI proposal is probably even less money.
I haven't tried it, but somewhere in that neighborhood: https://github.com/endojs/Jessie
Algol and Lisp were both specified in 1968, but Algol only introduced lexical scoping two years later. So probably yes. I don't have evidence though.
How does one harden Firefox? What's there beyond Tor browser and/or noscript?
Did you get your flu shot?
Well, the source is The Interecpt, based on leaked internal data, which I trust a lot more than stat aggregators like Alexa. If you're the CTO then you could just answer the question: how many accounts (or unique IPs, if multiple accounts is common) have posted something in the past month?
> If there are real engineering applications for GR, especially in optics

Large-frame optical Sagnac gyroscopes for precision geodesy:

https://www.frontiersin.org/articles/10.3389/fspas.2020.0004...

And some detail on the GINGER project, "Sagnac Effect, Ring Lasers, and Terrestrial Tests of [post-Newtonian] Gravity" (clarification mine), https://www.mdpi.com/2075-4434/3/2/84/htm

I imagine there is some literature on higher order modes in dispersion compensating fibre spools placed over underground flows (magma, water) but don't really have time to think about what decade practical engineering problems might emerge.

Of possible interest to you, quoting preface of following: "These few words should make it clear that quantum optics, experimental gravitation and measurement theory are not nearly as far apart as one might first have thought. However, there has traditionally been little contact between physicists working in these various fields." (which is a little less true now because of e.g. LIGO) https://link.springer.com/book/10.1007%2F978-1-4613-3712-6

Next, I'm pretty sure that the emissions spectra of galactic magnetars (https://en.wikipedia.org/wiki/SGR_1935%2B2154 , one of Arecibo's last big detections, §2.1 of https://arxiv.org/abs/2103.06052v1 ) are far from the cosmological scale (see https://arxiv.org/abs/1507.02924 n.b. figure 24).

> gravitational lensing ... is a cosmological effect

Also pretty sure the Magellanic Clouds, other non-naked-eye Milky Way satellites, and some galactic targets aren't "cosmological", https://en.wikipedia.org/wiki/Gravitational_microlensing#Obs...

Finally, it strikes me as unfair to to invoke Initial Conditions as a way to discount the relevance of gravitational observations. What, if not Intial Conditions, determines the frequency of your HeNe laser? Where did the neon in particular come from? (spoiler: https://en.wikipedia.org/wiki/Neon#Occurrence) And that helium is mostly a cosmological effect! ("The vast majority of helium was formed by Big Bang nucleosynthesis one to three minutes after the Big Bang. As such, measurements of its abundance contribute to cosmological models.")
Bigelow Aerospace is defunct. The patents from NASA have run out. Other people can build these structures if they want to.

Sierra Nevada has been involved in some research for these. I think they also did some thing for Bigelow as well.

I'm not a big fan of these inflatables. They are good for the in-between space, larger then the biggest rockets, smaller then a really built structure. I prefer us to actually figure out how to construct real structures in orbit.
> HUDSON: This was the one thing that Alan Greenspan contributed to economic theory: the Traumatized Worker Syndrome. He said, the reason you’ve had this huge productivity gain without any wage increase is workers are afraid to go on strike, or even to complain about working conditions, because they’re just one paycheck away from homelessness.

https://michael-hudson.com/2016/03/traumatized-worker-syndro...
Discussing UI is important too, esp. when it changes in a way that wastes users brain power.
PTB still shows up as Intel binary: https://cln.sh/5KA9Vh
Ah yes, you're correct. I see that I remembered that incorrectly.
Somewhat more interesting is:

"For example, the LabTop Mk IV combined with coreboot will offer approximately 8% more performance and around 20% longer battery life (with a record of 13 hours and 42 minutes for general use)."

Which is a bit of a WTF is different between the two. presumably they are sharing the low level intel powermgmt blobs, so why the significant power reduction?
Amen. For someone who programs every day but frequently has to type in French, Spanish or German I could not agree more. The Mac is awesome at typing everything.
Yup, in fact the biggest compatibility headaches in NT today stem from how early they adopted it: they made some assumptions about UCS-2 that turned out to be wrong and had to shoehorn in UTF-16 support that mostly works (except when it falls over a cliff). Meanwhile Linux and others waited for UTF-8 to exist and that's become the internet/web's major standard as well and there are some small papercuts interoperating between UTF-16 and UTF-8 that with today's hindsight shouldn't have been so annoying or necessary. Windows might have been better off waiting for UTF-8 itself other than Windows made the right architectural decision for the time when it made that decision and could not have suspected UTF-8 to turn up only a few years later.
Explains how they doubled down on hardware and lost.

BB’s market cap is currently a bit over 1/3rd of whatsapp’s acquisition price. And BB has minimal long term debt.
Ask HN: effx Acquired by Figma.. Why?
So if I'm piecing this together correctly, he decided he wasn't going to help out NSA. This led to him losing government contracts, which would lower the value of his company. So instead of taking the stock price hit (which would be the principled thing to do), he created false accounting records to defraud investors. And while he was publicly preaching that the Qwest was just fine, he was unloading his own stock.

And this is the guy I'm supposed to be sympathetic of?
I think Visual Studio is still miles ahead of Rider in terms of debugging experience.

Also, I don't think JetBrains is not that active in developing C# the language.
It's an interesting point, not just the placement rate but the graduation rate for medical schools is very high (barring a few last-chance, offshore type places if I understand correctly).

I never did it but have watched the process from a few different viewpoints. My impression is that the gatekeeping on the entry side is pretty strong (not just exam results, good schools may have multiple interviews before letting you in) but they also have ton of resources available to help you if you are bogged down. This latter part is helped by high tuition.

As for the vetting, as far as I can see they are fine with a bunch of false negatives, which results in more homogeneity than may be desired. It doesn't seem to be particularly empirical.
Might be because dark browser themes are rarely complete enough. There's always something off; last time I tried to theme a fully dark Firefox, I couldn't get the address bar text to be light with a dark background.
Imagine the battery life if you filled that case with battery.