skysight-inc/HackerNews huggingface dataset:
Many of them are Software Bureocrats - their job is to keep organisational processes running with the goal of avoiding expensive mistakes. They are a lot like corporate lawyers. They don't create new stuff, but they save your organisation from descending into chaos.

Actual engineering still happens at the heart of the organisation, that heart is just shielded by the gigantic army of software bureaucrats.
That's why I opened with "Look at the implementation". Go is unable to store the type and the pointer at the same time, so it warps what "atomic" means. Pretty much every other language has atomic mean "one of these will win, one will lose". Go says "one will win, one will panic and destroy the goroutine.

In fact, it's even worse than that. If the Store() caller goes to sleep between setting the type and storing the pointer, it causes every Goroutine that calls Load() to block. They can't make forward progress if the store caller hangs.
"Build Your Own Metal Working Shop From Scrap" I have that on my bookshelf, it's worth a read if you're just curious about how machine tools are made/work.

Might build the shaper out of there someday but currently it seems like it would be a better use of my time to buy an import lathe (assuming no natural disaster)
Yup. Time to close the HN tab for the week.
Yes, exactly like them. They have agency to the extent that actual sovereign power lets them do their thing. If Washington decided that Bill Gates is an existential threat to humanity what is he gonna do, ask Clippy for help? He'd join Jack Ma wherever he is within 24 hours.

Zuckerberg has dominion over Facebook by virtue of authority granting him that power but (un)surprisingly little power over anything else. just like any AI has control over what it does as long as its useful to its owners. Tech CEOs have been running a little wild in the US so maybe that illusion accounts for the prevalence of these AI theories.
We all now work at Lake Wobegon. Which means salaries will be set to average value of the position and lazy people will be subsidized by hard workers and better contributors. Not everybody contributes the same value.
Yes they do. Russia occupied Germany for decades after a defensive war.
Denial of Service Vulnerability in Envoy Proxy – CVE-2022-29225
you are still my hero…
my guess would be that they maintained such a low flight speed that fighter escort was made impossible by the lower supported stall speed of the small craft.

there were similar such shenanigans in the US during the 70s, it can be very difficult to intercept a slow bi-plane, for example.

You can demonstrate a show of force by buzzing the aircraft, but an escort is nearly impossible.
Truth be told, it is trivially easy to create deadlocks even in a pure message-passing environment such as Erlang. Message-passing is way oversold and doesn't solve as many problems as people think.
Recently got an M1 Mac, I couldn’t be happier. I use it all day every day for dev (ruby, node, react)

Everything was far easier than I expected it to be, the only issues I had was with installing python (a few cli Utils required it) but everything else has been smooth sailing and a much better experience than running things on my 2019 MBP

I’m not a huge docker user, but I run it for a few things and again, it was all smooth sailing.
According to this tweet Brian should just quit
I don’t see it happening, if anything it will be more like AI helping people compete at their jobs better. Any job that could be fully replaced probably should be anyways, freeing up the person to do more difficult or lucrative or human-centric work.
Anyone else loves the UI or is it just me?
Because he's dictator, when he's forced to negotiate he'll appear weak, which can be lethal for a "strongman" like him.
You can't disable this "feature", so you still don't know where things end / begin. Some tags can't be nested in <p> while you could expect that they can:

<p>
Paragraph with a list won't work as you could think
<ul> <li> Test </li> </ul>
Something else
</p>

Parses to:

<p>
Paragraph with a list won't work as you could think
</p>
<ul> <li> Test </li> </ul>
Something else
<p></p>

Similarly, in JS you are paying the price for optional semicolons even if you decide to use them.

return
{
x: 1
};

Will still not work even if you use semicolons elsewhere. So I don't see any advantage to actually using semicolons. JS is not worse than Python with it's basic inference, and yet in Python people will almost yell at you if you attempt to use a semicolon :)

I'd much prefer these features to be opt-in (yea, give me XHTML back for generated content). But when I can't can't disable them, why not embrace them ;)
you skipped the part where our leviathan restructures society into the optimal arrangement of 8 billion souls that somehow isn't a miserable dystopia (if nobody is suffering, is anybody living? however you answer that question does HAL 9000 agree?)
This is correct. The most "obligation" that an employer might have is to pay the employee for the value of their work, and even that's dubious. (show me the source for your moral argument) They certainly have no obligation to match CoL.

If an employer doesn't pay their employees enough, those employees should leave, their employer will eventually die, and that'll add another data point to tell the shareholders to either elect CEOs that will pay more or to stop backing companies in high-CoL areas.
An escrow is a smart contract
> On any given day you can read both that Russia is struggling and that Ukraine is ceding territory fast.

That's true on different fronts. Recently Ukraine lost territory in Donetsk & Lugansk while recovering territory at Kharkiv and Kherson.

Russia concentrated forces at Donetsk & Lugansk, it's their biggest offensive. Ukraine concentrated forces at Kherson, it's their offensive.

In other words both sides are trading territory with no clear winner while losing a ton of men and equipment where Russia is apparently losing a lot more. Giving this it's said that Russian campaign is unsustainable on the long term but Ukrainians are also under equiped and depend on donations & leases.

https://www.understandingwar.org/
> to use race-quota to amend past race-quota errors

Legally, this isn’t what’s going on. Affirmative action has only been found constitutional when it’s minimally implemented to further classroom diversity [1]. The benefits of a diverse student body, not curing past harms, are key to the test. (Also, minimising side effects.)

[1] https://www.oyez.org/cases/2002/02-241
People who spend a lot of company money to take Hill people on lavish vacations and provide expensive meals and then show a PowerPoint presentation.

It's totally not bribery though, just good business.
Maybe you countersteer. I don't. I checked by riding through a puddle, turning right, and then checking the resulting trail left by the tires. No overshoot whatsoever.
How about we stop using colors to categorize human beings? If it offensive to call Chinese people yellow or Aboriginal people red then we should stop calling other people white, black, or brown.
With Monkeypox doing the rounds now having a sex transmission vector , that is definitely not on :).
I learned it the hard way as well. I think my book was "computer architecture" by Morris & Mano
you start from PN to logic gates to truth tables to carnough diagrams to writing your own adder to D transistors to memory to bus to clock to cpu to write your own assembly to perform machine instructions.
That's a very good term for it.
>https://pacmanattack.com

>does PACMAN have a logo?
>Yes!

great, answering the hard questions.

the trend of creating a marketing website for every horrible exploit is so strange. Who are these people selling to, and what?

Fear to media outlets is my only guess.
> Full disclosure, I'm the author of ripgrep, so I have some particularly relevant experience in the specific domain of making regexes work well for the masses.

The unwashed ones?
Nintendo shipped it and I'm sure they knew.
The first edition of this book was my introduction into how computers worked at a lower level. It gave me enough of a grounding in various concepts that I was able to understand much of a Digital Systems class.

It also partly inspired my first efforts at building a scientific calculator (which would never be quite finished).

I definitely recommend it for folks who want to build context on the lower levels of computers, as a start into understanding CPUs, binary/hex, and other parts of how we tricked sand into thinking with lighting.
uBlock is a great blocker, but an absolutely garbage UI. Luckily the on/off button + 'Element Blocker' context menu entry do most of what I want without having to yet again try to decipher its cryptic icons.
Tiny Mining Handbook for Internal Extraction
Adafruit appears to still be supporting the Arduino IDE and ecosystem with their new boards.

https://blog.adafruit.com/2022/04/20/new-guide-adafruit-esp3... "Circuit Playground Express is the newest and best Circuit Playground board, with support for CircuitPython, MakeCode, and Arduino."
would love a similar book for Networking up to the modern Internet
> Ukraine is taking high casualties, proportionately more than Russia.

41M (Ukraine) vs 145M (Russia)

I'm curious on what are the numbers for military age men as Russia is demographically fucked.
I don't think a Swiss army knife approach is a good idea for security software to begin with. It's a good way to generate cruft and lock yourself into questionable design decisions due to Hyrum's Law. It's not great for auditability, either.

FFmpeg is a practically an entire non-linear video editor in a CLI tool. That is indeed a lot of complexity, but the stakes are low -- if you screw up an FFmpeg command, you've lost some encoding time, not your entire password database. (I get the impression a lot of FFmpeg's functionality wouldn't serialize well, either, but I'm far from an expert on that.)

Nobody on Earth ever has or ever will like the Windows registry.

No comment on Firefox.
This is funny, but the OpenSSL CLI is in large part just a series of utility/driver/diagnostic programs for library functionality that isn't expected to be used on a standalone basis. It's the industry standard for generating certificates, but that's because the industry doesn't understand certificates; most people should be using nothing but certbot and mkcert.

What bugs me a little is the idea that you might want a well-designed version of what the OpenSSL CLI offers. Bad idea! You want tools designed to do one thing well, not one tool that offers a thin layer of getopt() over a low-level cryptography API.
No not necessarily. Let me go over some scenarios:

Bob contributes 1. I contribute 1.25. Units don't matter, I contribute 25% more.

It used to be maybe the salary band is $100k to $130k. Bob gets $100k. I get $125k. My employer gets a total value of 2.25 for $225k.

Now my employer has to disclose salaries and has 2 options:

1) Don't make out salaries the same, Bob quits, now the employer has only 1.25 when they need 2.25 and have to go re-hire ($50k or more in a lot of times).

2) Make our salaries the same, so now Bob also gets $125k and employer pays $250k for 2.25. This is what will happen in the short term and what attracts people, but in the long term what will happen is

3) Make our salaries the same but slow raises so gradually they go to the inflation indexed amount of about the average, so $112.5k more or less. Now employer still pays $225k for 2.25. But now I am subsidizing Bob the less productive worker for $12.5k every year.

A lot like unions, making things more uniform often comes at some expense to the top performers. I always sit near that top so I say no this is stupid and I hate it. I don't give a shit what Bob is paid and I give even less if it costs me money for him to get more.
Gotcha, I don't know about the details, I just know that their readme states very plainly that "Despite having originally evolved from Mercurial, EdenSCM is not a distributed source control system."
The WHO dismissed the "Covid is airborne" theory.

They toed the CCP party line - recommending against halting international travel from China, even as the Chinese locked things down domestically.
To be fair, whether parallel streams is useful isn't a function of N alone, but the time each operation takes. If it's a nontrivial calculation, then by all means.

Although parallel streams are seldom the best option in terms of performance even for large N. They may often be faster than sequential processing for large N, but a more thought out approach is almost always faster still, often significantly so.
So a slice consists of a pointer to a backing array, a length and a capacity. If you don't use a pointer and pass this slice around you will copy it.

This is problematic because even though you copy it, you're still pointing at the same backing array.

Therefore, a backing array with data like [1,2,3,4,5] could be pointed at by 2 slice headers (slice metadata) looking like

A: {len: 2, cap: 10} [1,2]
B: {len:5, cap: 10} [1,2,3,4,5]

So any append operations on slice A will mess up the data in that backing array.

Now, sometimes your append will resize the slice, in which case the data is copied and a slice with a new larger backing array is returned. If this was happening concurrently then you'd lose the data in racing appends.

If the append doesn't need to resize the slice, then you'll overwrite the data in the backing array. And so you'll corrupt the data in the slice.

Here's an example I threw together: https://go.dev/play/p/qRUKUwIf3vx

Although the code in the post doesn't actually look like it has an issue. Their tooling just flagged it up as it potentially has an issue if the copy was actually used in the function. But the `safeAppend` function targets the correct slice each time.
Not sure what he's referring to, I'm not familiar with the parallel posts. I just do the "rotate around the loop" part twice. I have had untied shoelace approximately twice in the last 5 years.
Same with "run at startup" and some other important ones; there's no way to deny it once installed.
TIL. Thank you very much! I had no idea that a Flatpak would increase stability. I'll have to get it a try.
I like it because it's dev hardware. They publish schematics, and their stuff is cheap enough to buy on a whim.

There's an active community to get involved with on hardware hacking.

> And they even sell dead and irrecoverable (without soldering/hacking) on devices like the pinephone keyboard/battery. Or how dare you use the phone usb-c port when on the keyboard - if you do, you fry the charging chip and possibly the battery.

Yes, this was bad.

> Or that the rockpro64 is said to be able to boot with eMMC rather than microSD. But when you try to, it doesn't work. Back to microSD. Weirdly enough Ive heard some users whose boards DO work with eMMC. None of mine did. Again, since docu is terrible, I copied the command that works and didn't for me. Seems like bad hardware versions or something?

eMMC and NVMe booting is supported by the hardware. The firmware might not, but the firmware is writable, and the developer community is working on unifying this.

State of the art for Linux distros is to install Tow-Boot on your SPI flash, and then a UEFI OS.
I think it also helps that PowerShell treats everything as objects and can pass them in pipes.
It is. You're not meant to be using it directly. Some of what's in OpenSSL is just glorified test drivers. OpenSSL is complicated in large part because it is the de facto reference implementation for a lot of cryptography.
I suspect the answer is "probably yes", since SHA-1 collisions do exist, and practical ways to generate collisions are known.

Which doesn't mean it's currently risky, I'm not sure how you'd turn a collision into an attack without leaning on external systems (like code review that approves by SHA, and allows you to push later). But if MD5's history is any clue, that will not be true in the long run.

The time to begin moving to a new algorithm was several years ago, when those collisions were demonstrated. Git is unambiguously lagging behind basic security practices here, though that's likely currently fine. The question is for how long that will remain true, and that's something that can only be answered after it has already become unsafe.
Unfortunately the problem I most often encounter with "unwanted" search results is not isolated useless sites but when the results for anything shopping-related are multiple full pages of crappy SEO-spam results.

If anyone has tips for addressing this situation I'd be much obliged.
We still have Usenet. I use the aioe server (I do not use the binary newsgroups).

I also have my own NNTP server (although currently there are very few messages so far, but anyone who is interested in this things can join if they want to do). Currently the messages are only on my NNTP server, but it would be possible to be propagated to/from other servers too.

I set up NNTP instead of using mailing lists/forums, since I think that NNTP is better. (It would be acceptable to also allow subscribing like it is a mailing list, and web interface, but the NNTP must be primary.)

There is still some spam, but the spam seems to come from Google, as far as I can tell.
Side note: the cookies preference pop-up on that site is absolutely evil. Anyone who actually chooses something like that is an asshole.

It's funny that someone who writes an article about how crazy of a GUI OpenSSL would have to have would also have a form that someone needs to fill out to opt-out of bullshit tracking. It's almost as if... Never mind. This Carl Tashian person is just shitty.
WireGuard is much, much better than OpenVPN, and almost nobody should still be deploying OpenVPN, but this is about OpenSSL, not OpenVPN.
Unfortunately, I think that there really is a fundamental conflict at the bottom here. One of the key things these kind of exam schools promise - I'd argue the key thing - is an environment where all of your kids' peers will respect and value education. We can and should ensure that everyone's schools get the equipment, teachers, etc. that they need, but any non-selective school is going to have to include a lot of kids who don't care much about academics.
> bureaucrats

BPS is not overseen by any elected representative?
>Most of the mainstream articles make it seem like they a) did not read the paper b) are incapable of understanding the paper

This seems pretty par for the course in terms of science/tech journalism to be honest.
Sometimes it is tho. Imagine if pilots had to use something akin to CLI instead of numerous buttons, handles, clutches, etc.
Krita makes use of radial menus as an option.
Sure, I'm willing to accept that the X.509 is inherently complicated and there's not much OpenSSL could do to simplify it. But that seems like a good reason not to add support for 44 other major operations to the software...
It's wierd tho because it's not ENTIRELY tone-deaf. When i was reading it i would agree wholehearitly with some, and wince at others.

If he would have left it at these two points and immeditaly called a company all hands:

>First of all, if you want to do a vote of no confidence, you should do it on me and not blame the execs. Who do you think is running this company? I was a little offended not to be included :)

> Our culture is to praise in public, and criticize in private. Posting this publicly is also deeply unethical because it harms your fellow co-workers, along with shareholders and customers.
> but they have also not released ARM instantclient or even an ARM version of Java

Java has been available on ARM since the days of Nokia phone dominance. Not sure what you're referring to?
Firefox's reader mode works just fine. You need a right browser for the right HTML.

... anyway, it bothers me sometimes that I'm not aware of any spec for "reader mode compatibility", did anyone see anything like that?
They're quite common in some parts of the world.
Thunderbird 91 has threaded views in individual accounts. It is a little hard to enable the view though: In the header bar directly above the list of messages, there is a little "thread step" icon on the left by default, that must be clicked to enable thread view. This is next to the star icon, the paperclip, Subject, etc. Unlike the other header items, clicking the "thread" icon does not sort by threads, instead it toggles the thread view on and off.
> Honestly, when I hear DevOps I think 'oh great, this company wants me to do 2 jobs to save on headcount'.

Exactly my thoughts as well.
That's my point. Most shops do NOT want to develop their on CI pipeline systems from scratch. I don't care if Fossil makes that theoretically easier, I don't want to do that at all. I want to use a Gitlab CI, or a Circle CI, or hell even a Jenkins. Git has that available ecosystem. No other serious competitor does.

Theoretically, it might be easier to weave your own cloth and then tailor pants from scratch, if you use some novel synthetic fiber rather than cotton. But I don't want to weave my own cloth and tailor my own pants, so I wear cotton blue jeans.
Indeed. Probably the most common data structure ever used, list of stuff, Go managed to make subtle and full of surprises. A knife without a handle.

This makes the stated reason for the delay of generics hard to understand. They didn't wait to get list/vector/array/slice right.
Dutchie?
> "The Next Generation" particularly featured touch screens and tablet computers long before those things were common

And called them PADDs amusingly enough.
I don't travel much for work and am not a big traveller.

This isn't really a big problem, and RDM does have daily flights to most major west coast destinations.
The first main point of this article is already wayyyy off the logical rails.

1. AIs don't even need superhuman cognitive abilities to defeat us!

2. They could just, make a bunch of copies and work together, but like, way harder and faster than normal humans, man!

3. Oh, wait, oops, that's superhuman cognitive abilities.
When you compare with the sad-trombone sound that Windows has produced for its ARM os, it is speedy.
Yeah that feature is complete garbage. The intent is laudable (reducing permissions for unused apps) but the implementation of getting a notification every once in a while with a ton of permissions removed is awful.

Combined with the fact that Google seems to be sending more notifications for all kinds of junk nowadays makes it even easier to fail to notice that.
> We might just have to live with a boom-and-bust cycle on this planet

Reminds me of:

"The fact is, that wherever the extremity of winter frost or of summer sun does not prevent, the human race is always increasing at times, and at other times diminishing in numbers." - from Plato's History on Atlantis
Or GrapheneOS with sandboxed Play Store.
Apologies, misread the intent.
You raise an interesting point -- which you may not have intended, I don't want to put words in your mouth -- that once you treat sentient animals as disposable property, it becomes difficult to draw ethical lines. Surely a chicken and a cat have approximately the same moral worth, and in the U.S. you can buy whole cooked chickens at the store for $5. Buying a chicken and throwing away the meat is just as pointless as killing a cat, and a factory chicken's life is torture from beginning to end. So any difference between the chicken and the cat is sentimental at best.
> It's quite a shame how much better their hardware could be if they hired someone to do the in-house work for stable OS support on any of their devices.

Perhaps, but is there any company doing that for aarch64 devices?

The Pine64 development community are making cross-distro improvements to aarch64 support, e.g. Tow-Boot.
This change was when I stopped downloading from the Play store. Prior to that you could easily see that the compass or flashlight app you were going to install needed network access, something that set off alarm bells given the state of malware back then.
It can help indeed! Thanks for the suggestion BTW [1]

[1] https://github.com/gildas-lormeau/SingleFile/commit/6c7a2ef1...