skysight-inc/HackerNews huggingface dataset:
No, logic bug consequences are fundamentally different from memory corruption bugs. A bug with an access check for one resource in the kernel means you get access to that specific resource. A missing bounds check in the kernel—anywhere in the kernel—means you get arbitrary code execution. Sure, _sometimes_ you can escalate from one resource to another with an access check issue, but that’s a _sometimes_. One memory corruption bug _anywhere_ defeats the protection of _all resources, all the time_. Not only that, but memory corruption bugs have well-understood exploit recipes that attackers can make once and reuse any time they find a new bug to save work, whereas an attacker has to write a new distinct exploit for most logic bugs.

There is no equivalence to make. Memory corruption bugs are unambiguously, unequivocally better exploitation primitives than logic bugs.

No one is claiming that memory-safe languages solve logic problems. The claim is that most memory corruption bugs are conveniently exploitable and any exploit can reach for anything in the address space, and logic bugs often can’t. You could as well say that you’d rather promote chess pawns to knights instead of queens. Like, that makes sense sometimes, but it’s a bad default.
Weird that this post was included in the pool as it gained significant tractions
2 days ago
https://news.ycombinator.com/item?id=31570698
No, it does not. It also doesn't always generate the same category of image. See https://twitter.com/realmeatyhuman/status/153173861680386457....

As much as people would like there to be, there really does not seem to be anything here. The original author doesn't think so, either (would need to refind the tweet).
Shouldn't an obtuse statement like this denying the basic reality of history, economics, politics disqualify someone from from any high level government position?
I'm using catch all since forever. I regret nothing.

Two stories:

I don't use mails like facebook@domain uber@domain - that's too obvious. And knowing that may often disclose that I actually have an account registered on given page. I don't want that, so I go full random, using few words I have in mind, current few words from the song I'm listening too, etc. So password manager helps me with e-mails too.

But Sometimes when a website annoys me (stupid rules for passwords, crippled UX for forms, because re-writing a select component in javascript is such a brilliant idea, etc) I tend to insult the company I'm registering with using my e-mail or password, I mean mail: this.freaking.store.is.dumb@domain.com and pass: goDieInPain1312323$$$$. Once I registered account for a supermarket loyality card with some very little insult towards the supermarket. Later I got some huge amount of the points collected and their system crashed and I had to contact the support (the bonus was too high for me to give up on that). First via e-mail then via phone, when they were confirming my address. They helped me and said nothing about the name I was using.

Another story:

When I started with catch-all I was actually using mails like companyname@mydomain, and when I once contacted them via phone the person talking with me was not very into tech I think and were accusing me of... I don't really know exactly, but she told me something about me using their stuff without their acceptance, when I tried to explain that's my own domain she told me I cannot use their name, because that's a copyright infringement. Weird.
In my particular market sector it seems everyone is using some form of cloud functions (SAM, Serverless Framework etc), and migrating away from K8S/containers.

Regarding PaaS stuff like Heroku, the only people I know that are still using that are solo hackers.
For who? Genuinely curious, I didnt even know Netscape has a server division. Was it punishment for the team working there because it broke their potential, or was it that AOL got ripped of because Netscape server tech was horrible?

Late 1990s/early 2000s acquisitions just always sound so wild to me! Insanely wasteful, or just even bizarre. Tons of old/traditional corporations trying to merge/buy their way into completely unrelated markets, oe in this case cash rich new megacorps like AOL that had immense potential just squandering insane amounts of capital with almost 0 RoI. Crazy times!
I worked remotely for over six years now so my 2pence:

>I work best when I have a commute and a dedicated working space.

I sometimes have this urge too, thankfully renting out an office space is fairly cheap and can be done quite flexibly for when you need, and most importantly -- WHERE you need it.

Otherwise having a dedicated home office is great, but I understand that it might not be so if your family/living situation is different.

>having basically zero relationships with my co-workers is isolating

It doesn't have to be this way, you absolutely can make long lasting and very meaningful bonds without ever seeing a person.

And productivity wise, it is all about processes and culture, both office and remote can work wonderfully or be a disaster.
As someone who got into BAYC during mint week, I knew it was 2021's version of CryptoPunks, but still couldn't have told you it would surpass X amount in value.. Doodles, MoonBirds, freakin' Goblins... surprised nearly every time.
PiKVM V3 Pre-Assembled: In Stock
I used to hang out with musicians and play music with them and jam into the late hours of the early morning. Sometimes we would record our jams, but most of the time we would not.

Listening to these old recordings, you would occasionally find magic and "endless wonder" (see Warehouse 13 episode "Resonance"), and that got me thinking: how much incredible music has been lost to time, music that wasn’t written down and composed and was never recorded?
I always preferred ytalk, then your own window to type in. (The screen was split in an upper and lower half and you had one or the other.)
License plates also. It's not new.

I think it's fine, if you're going that fast, you can't be anonymous. Airplanes aren't, missiles sure as shit aren't, the whole atmosphere is under surveillance for anything larger than a baseball.
A somewhat-recent example of a great novel that was recently discovered was "Stoner" by John Williams, which is about an English professor named William Stoner who stoically lived a seemingly unremarkable life that still evokes sympathy and empathy.

The book was first published in 1965, but failed to gain popularity. It took until 2013 to gain wide popularity, and is a contender as one of the greatest American novels.

Coverage about the book's resurgence was published in The New Yorker (paywalled at https://www.newyorker.com/books/page-turner/the-greatest-ame...) and The Guardian (no paywall, via https://www.theguardian.com/books/2013/dec/13/stoner-john-wi...).
Ask HN: Are DB's the new JavaScript-framework-boom-like explosion?
I've noticed recently that a huge amount of new DB engines and other data related projects/products/tools are been released at an unprecedented frequency. I wonder if there is happening a Cambrian explosion similar to that experimented by the javascript ecosystem years before, what do you think?
Google Wave ftw
That is for salaried positions where they aren't even required to pay any overtime at all.

Non-exempt workers have to get overtime after 40 hours.
Ask HN: Samsung Smart Switch saves Instagram login of person I never met?
Hm hello!

I just encountered a problem today and I'm not sure what to make of it.

I bought a new phone that was delivered today and used smart switch to move the apps and accounts from my old phone to the new one.

When I went to instagram I saw that it was logged into an unknown account. I then checked it out and saw that it was the account of my friend's sister.

This was extremely surprising and weird as there are the following thigs to be mentioned:
- i never met my friend's sister
- the sister lives in another country.
- there's no chance that my friend would have logged in on my old phone with her sister's account ( there was never a need for it + she doesn't know her sister's account + it just doesn't make any sense).
- my friend might have logged in with her google account on my phone at some point (neither of us remembers this, but we just take it as a possibility), but she doesn't have her sister's account saved in her google.
- my friend doesn't have her sister's account on her phone.
- I am the first time owner of both phones.

I tried to remove the account, but so far it failed. Each time it logs out, the option to log in still appears, even after pressing on remove/forget account.

It says that the account is saved with "Google Smart Lock", but when looking at the saved accounts we couldn't find the sister's account there.

Any view on this is highly appreciated.
TLDR: Amazon thinks his book has a copyright violation but refuses to reveal the details.
There are known unknowns, but worse are the unknown unknowns.
you say remote work slows things down, but, today.... I met with the various teams I oversee (contractors, FTEs). The majority of them live/work in other states and I only see them when they fly to the mothership for an onsite (and many, I will never meet). I work for a subsidiary of a company that has its own mothership in another continent, so much of my work is necessarily remote.

I didn't go to the office this week because my employer said we're in "yellow tier", which means masking up in the office. We're open office, so that means a bunch of people sitting around each other in masks. I didn't have any critical meetings that would have worked best in person.

I talked to my one coworker who is also local (my manager used COVID to move to another state) and we agreed it didn't make much sense to come in since the majority of my coworkers work elsewhere. Why come in if there's almost nobody there?

That said after a few weeks, I do want to visit the office to see a bunch of people in person but it's mainly for social reasons, not because it makes me more effective locally. I have worked on linux/python remotely off hours for decades (and often just not come into the office a few days a week). It really seems like this is ultimately about personal preferences.
It does, but I'm guessing it's just one simply understandable example.

C# has the very Windows-centric https://docs.microsoft.com/en-us/dotnet/api/system.environme...

Unity itself has the Application.*Path properties for some more general cross-platform-aware paths. https://docs.unity3d.com/ScriptReference/Application.html
I don't think there is any evidence of a language here unless you stress the definition to the point of absurdity. It will not even reliably produce the same kinds of images that had the text that it output, which was the original premise of the claim. Obviously, probing some overconstrained high dimensional space where it's never rewarded for uncertainty has to produce something; that doesn't mean that something is a language.
Research may reveal why people can suddenly become frail in their 70s
Since this serves on a REST endpoint, does that mean you wouldn't need an envoy proxy if you want to use gRPC from the web?
Do you think the decline of large corporate R&D efforts is cause or effect here (or is this a false premise)?

I am wondering whether we've seen the reverse of the idea I was originally challenging (if research was valuable it would be a business), where universities captured a profitable business because it was being neglected by the business community (and were distracted from basic research).
Then don't buy it until it's fully released. I love early access games. I love being part of the development and being able to return to a completely different game down the line. It adds a lot of replay value.
It's well known within the space.. in total he made ~18 ETH from this side hustle.
5) Until the tools are smart enough to detect custom domains... Until you have few domains of course :)
It’s the other way around. ML is cool precisely because it’s a guitar for the mind, not a mind itself. https://soundcloud.com/theshawwn/sets/ai-generated-videogame...

I made that by using ML as a guitar. I chose instruments and style the way a guitarist’s fingers chooses frets.

And saying “give me this style with these instruments” is far easier than recording it yourself.

For what it’s worth, I agree with you about AGI. https://twitter.com/theshawwn/status/1446076902607888385?s=2...

But for me, that means it’s far more interesting than AGI. Everyone has their eye on AGI, and no one seems to be taking ML at face value. That means the first companies to do it will stand to make a fortune.
Say you have 10K USD. If you don't know what you're doing, take extraordinary risks, have poor timing or just bad luck...you'll lose all of it. If you do know what you're doing, you can turn it into 20K, 30K, 50K, 100K.

The potential upside is many multiples of the downside, hence it's asymmetrical. There's no asset I can think of with this potential upside on such small timescales.

Isn't it risky? Yes it is. Like I said, -100% when fully incompetent. Against many multiples of potential upside. That's what makes it asymmetrical.
Yes it does, and as I mention above, TiddlyWiki is another place to look for inspiration for a tool like this. It's been doing this sort of thing for 20 years now, and being a web-first tool, it's as open and standards-based as possible, and can be run without any server at all if you want to run it locally...
To play devils advocate, Facebook is more essential to my life than it ever was before.

* Marketplace was a huge success in terms of subsuming Craigslist. The quality of posts and the volume of postings makes me rarely even check Craigslist anymore.

* Small forums for various hobbies are almost entirely driven by Facebook groups now, instead of in the past where you’d find some custom bulletin board where the last post on most subforums was 3 years ago. It’s better than Reddit for certain things. Groups for communities (ie: your neighborhood or small town) are thriving, too.

* Messenger is the sole mechanism I have to keep in touch with friends from school that are now back overseas.

I think their general success is assured, even if the metaverse isn’t ready yet. They can afford to lose some money on a big bet.

On the other hand, I think that they missed the boat with the metaverse not being a big thing during covid lockdowns, because the cultural rebound of covid yields zero appetite for virtual existence. People want to make up for lost time.
See google docs
Do you mind enumerating what those systems are? I've only played around with Allegro CL and SBCL myself.
If they let me use it offline without an account I would be tempted. I have no desire to have hardware that only works when connected to the internet via an account.
Are any of those people in this thread?
This seems self evident and im sure literature is the least valuable of the treasures lost to time.
It's not even about such works as Dante's Inferno, which are directly thematically related to Bible. As with Shakespeare it's all about hundreds of small things, expressions, metaphors. Without Bible words and phrases such as "forbidden fruit", "good Samaritan", "eye for an eye", "Armageddon", "wayward son" lose context, or meaning.
Judging from his behavior modeling, spend half of that on Twitter.
Wasn't Jamie Dimon one of the individuals who was largely responsible for the last "economic hurricane" and was shielded from personal financial injury by government bailouts?
Absolutely. Catullus' poems, a mainstay in the modern Latin canon, was rescued from one surviving manuscript found in the bottom of a wine cask IIRC.

It's always very exciting when we find some accidentally well preserved archeological site for the chance that we might come across new scrolls.
> Elizabeth Line purple (Pantone 265) has been chosen primarily to assist passengers with wayfinding and navigation. It is visually distinctive from the other modal roundels – London Underground red or London Overground orange – enabling it to be easily identified by customers.
It was beyond reckless on Nate's part. He was a darling in the space, had a punk prior to this side hustle, and just blew himself up - not in a good way.
What’s wrong with someone seeing that you are typing?

Seriously.
> “No busy indicator, no offline state, just send your message and they’ll get it on all of their devices”.

https://www.youtube.com/watch?v=8wfG8ngFvPk
I strongly disagree with the way people just throw up their hands and accept defeat. It is possible to have privacy on the Internet. Projects like Tor, I2P, and Nym are working to make this a reality. Fight back against the surveillance capitalist dystopia. Normalize privacy.
The parent posted a NYT article about cell phone data being used to inferring an individual activity based on their location. Recently, the NYT is implying that the data isn’t really all that accurate and can’t be used to infer an individuals activity.
I am not anywhere near as familiar with the various XMPP specs and extensions as I am with those related to the Matrix protocol, but my general impression is that Matrix is much more flexible for things beyond chat and more willing to embrace emerging tech and communication concepts, while XMPP is more stable and focused. I'll need to get more familiar with XMPP before I can say more, but I can at least say that I have never got an XMPP server working AND had people join it, but I have been able to migrate many people to Matrix (albeit not easily), in large part because of the excellent work done on the clients (Cinny stands out atm).
The question is whether or not this is even a category that will ever be more than a niche. What value does this kind of VR environment really provide beyond its novelty, and is this something that the average person actually wants? I am not so sure about that, and history is full of technologies that sound cool on paper, but have limited use in practice.

Consider, for example, the repeated attempts at making 3D televisions a thing. It keeps popping up every couple of years, then people figure out that they don't really need it, and it fades away again. This kind of VR technology could very well be the same. Even 3D gaming remains a niche despite some serious attempts by major players to turn it into something more than a gimmick.
Or use a password manager.

1. Create new every with title "Hilton"

2. Generate email address (e.g. 8467588@somewhere.com)

3. Generate password

Done.
Well, I can only answer with kind of a pun. With Wittgenstein, language is a constant conversation about the extent of the world, about what is and what is not. As such, it is necessarily shared. In the tractatus we find,

> 5.62 (…) For what the solipsist means is quite correct; only it cannot be said, but makes itself manifest.
The world is my world: this is manifest in the fact that the limits of language (of that language which alone I understand) mean the limits of my world. [1]

So, something could become apparent, but you would still haven't said anything (as it's not part of that conversation). ;-)

[1] https://www.masswerk.at/digital-library/catalog/wittgenstein...

(I deem this edition to be somewhat appropriate in context.)
You’ll change your mind once you start seeing people walking around in their rPods, or whatever. (Apple’s new headset)
Nova Credit (YC S16) | Remote (Latin America or US) | Onsite or Remote | https://www.novacredit.com

Despite having built substantial credit in their home countries, millions of immigrants have difficulty accessing credit cards, loans, mortgages, and leases without domestic credit. Nova Credit enables newcomers to share their credit history from their home country with financial service providers and others, unlocking new consumers for lenders, and new futures for immigrants. We are 50+ people and have raised $50M in Series B funding from Kleiner Perkins, Index, General Catalyst, Sound Ventures, YC, and more.

To learn more about who we are, our engineering culture, and whether this is the right place for you, read our Key Values profile: https://www.keyvalues.com/nova-credit

Here are our open roles:

* Engineering Manager: https://jobs.lever.co/neednova/dec21a7a-7612-400e-bf64-8f8f8...

* Infrastructure/Platform Engineer: https://jobs.lever.co/neednova/0dd2948a-507e-4cf4-88c0-3bd6c...

* Senior Software Engineer (Backend): https://jobs.lever.co/neednova/79b7fb4c-efad-46f8-8e13-8b0f4...

* Staff Software Engineer (Backend): https://jobs.lever.co/neednova/f8bd1605-8753-4d18-b1ed-f1176...

* Product Design Lead: https://jobs.lever.co/neednova/799c02c4-6654-47a5-85ab-72237...

Tech Stack: Node.js, Postgres, AWS, Terraform, Ansible, React
Thats different though. There are so many pieces of journalism that start "It was a cloudy April day when Someone McSomeoneface finished their coffee and walked outside and had no idea that later that day they would take the first steps towards revolutionising sock manufacture" and you just know from the first sentence that its just going to take fucking ages to tell you anything
TestFit | Software Engineer (multiple roles) | Full-time | Remote (CST +/- 2)

We design buildings in milliseconds. See it in action here: https://testfit.io/.

Our current product is a desktop CAD application that has been on the market for 4 years. We're hiring for several positions right now across many parts of the software stack - desktop, web front-end, back-end services, and engineering management.

The desktop platform is written in C99. If you like managing your own memory, optimizing algorithms to run in under a millisecond, and solving tough spatial problems using 2D vectors and trigonometry, then it might be the product for you. Being prone to ranting about how much RAM Slack uses is also a good sign.

Our new cloud services stack is newly underway in Ruby on Rails and is focused on adding collaborative features to a formerly-offline desktop tool. Join us if you want to get in at the start of a new project and help shape the connected future of our product.

We seek to create a company of people who are humble, hard-working, and capable.

You can email me (CTO) at ryan [at] testfit.io to apply or inquire more about our positions.
Being able to track passengers is a bit new
Rivian | Self Driving | Remote

Rivian’s Self-Driving Cloud Team is responsible for the end-to-end implementation of cloud digital experiences across web and mobile apps. To that end, we are developing a world-class cloud services platform that will support implementing fully autonomous self-driving for Rivian vehicles. We are seeking a Full Stack Software Engineer who will be developing large-scale applications using the latest cloud services technologies, AWS resources, and UI frameworks. You’ll be building from the ground up with an obsession towards helping the Self-Driving team go as fast as possible and manage petabytes of sensor data.

Key Qualifications:

- Relevant industry experience, with 3+ years of building large-scale enterprise-grade cloud solutions.

- Experience building distributed systems at scale that can handle millions of transactions/second.

- Build microservices with Python, Go or Java. We use Go and Python.
Strong foundation in algorithms, data structures, and software design.
Communicate design ideas and document them.

- Proficient in NodeJS, Javascript/Typescript, and UI frameworks (Preferably React JS).
- Good understanding of Kubernetes, AWS technologies, CI/CD pipelines, and GraphQL/RESTful APIS.

If interested, please send your resume to mikehitchcock@rivian.com with `HN : Resume` in the subject line

https://boards.greenhouse.io/rivian/jobs/4709343003