skysight-inc/HackerNews huggingface dataset:
OpenSSL is known to be broken.

All this bickering over language misses the real problem.

The actual solution is that open source, widely used code is a target for hackers.

By using one library used everywhere for everything, you’re painting a target on your own back.

The real solution is we need the software ecosystem to have more competition and decentralization.

Use alternative crypto libraries.

If you want a drop in replacement, use LibreSSL which was forked and cleaned up by the OpenBSD guys due to HeartBleed.

But the long term solution, is more competition by using smaller, more specialized libraries, or even writing your own.
So, I think this is one of those things where YMMV is very much true. That said, I have a lot of wrist/thumb issues and am heavily invested in ergonomics to mitigate said issues and prevent them from worsening. I also wear a large watch every day while using a computer, and I experienced at times exactly what you're referring to.

Ultimately, it came down to the band. The only bands I found that would not cause issues were bands like the milanese loop for the Apple Watch, the trail band for the Apple Watch Ultra, or similar designs, where these bands have flexibility and are capable of sliding/slipping in a controlled fashion to "self-adjust".

The issue with other watch bands type like a typical plastic sports band or metal link bracelet, are that they have no flexibility. What happens is that when your wrist flexes and the band doesn't give way, is that it creates pressure on the tendons and you can end up getting a form of RSI. Much more flexible bands give way and allow your watch to adjust over time to the position of where your hands need to be for typing. When using a milanese loop style band I even noticed I would need to tighten it again when I'd stand up to walk around as it'd be a bit loose, and it'd hold its position until I sat to type again. That it's significant enough to be noticeable is indicative that it's quite a lot of required flexibility.

Rather than giving up on wearing a watch, I'd recommend you spend some time trying different bands and look for flexible bands.
The American Public doesnt use metric. Thats why the article is written with miles.
Technical write up by the security researcher at https://emily.id.au/tailscale

ps. she's looking an employer rn // hire her!
So Much Trouble for So Little Yield at the Fed
Your analysis has some merit, but I still wouldn't agree overall.

First, he can't sell any of that 5.7%. Collateral is an all or nothing deal, like any other loan. Technically who ever collects it may not sell it either, they may hold onto it rather than dump it, but it is entirely their decision.

Second, he owns about 21% of TSLA (so the web tells me). And Twitter lost 1.14B in 2020. That is likely to be a steeper loss this year. Selling 1+B / year - with very little end in sight to the pain - will eat into his remaining 15% share. Liquidating 1+ B a year of stock is not a trivial amount and it will not be looked on favorably by investors. It will signal his pet project is more important than his very serious business - a business where investors have been all to happy to short in the past.

IDK, just my opinion. Not financial advice, obviously.
No paywall: https://archive.ph/ssHof
Apple sends DSID with iPhone analytics data, tests show
There are a few positive signs, but of course we won't know for sure until it's done. The Apple Silicon approach involves firmware blobs (not good) with relatively stable interfaces (good for Linux maintainance, after the cost of initial port). https://news.ycombinator.com/item?id=33155585
Is same-day delivery really worth this? This story is in the realm of sci-fi nightmares.
The definition of virtue signaling is:

"the action or practice of publicly expressing opinions or sentiments intended to demonstrate one's good character or the moral correctness of one's position on a particular issue."

Thinking that it might be bad for brand reputation to have engagement with your posts to be filled with antisemitism and porn isn't exactly virtue signaling.
Piano with Built-In Alexa
Tailscale Security Bulletin TS-2022-004
That's very interesting. Thank you.
I've calculated ~20kB to store this number in particular.

GPU __shared__ memory is 64kB. A 1024-wide workgroup would be able to store 4096 bytes per register, if the whole workgroup was just working on one number. So ~6 registers x 1024 shader workgroup to store the full 20kB number.

__shared__ memory would allow for very quick shader-to-shader communications.

I think... it can work. But its difficult for me to visualize the full program. Its going to be complex, but probably doable. Its also not really a design pattern that a lot of GPU code (ex: Thrust) works in very well, you'd have to use harder to use libraries like CUB instead.
I’m not an expert but I’m sure that’s not true

If you're not an expert why are you sure it's not true. Most games render a lightweight pass to do all rasterization to a g-buffer, then do the expensive shading later. This separates visibility from shading. If fragments are already occluded by the z-buffer they can be skipped as soon as they can test their z value against the buffer.
As with all media, mastering makes a big difference. If you just stick a film into a TC machine and directly encode to DVD then film-grain (and other artifacts) will demolish the quality of a DVD because so many of the bits end up being spent encoding noise. HEVC handles this somewhat better and the higher bitrate of Blu-ray gives the codec some breathing-room.
I don't get it. Why doesn't everyone just use the battle-hardened, fully-compliant Rust implementation of OpenSSL?
Write up at https://emily.id.au/tailscale
I doubt that the kernel will adopt the C++ memory model (the big change in C11). Instead, they will keep doing their own thing. Given the problems with the memory model, I can't really fault them. But framing this in terms of standards versions is a bit of a stretch. They could easily adopt additional GCC extensions over time as they move minimum compiler versions forward. Standardization does not really matter there.
Song Of Life: Generative music using cellular automata
I don't think the real issue is that one. At least in Safari I get this:

t = document.createElement("template")
t.innerHTML = `<style id="outside"></style><svg><style id="inside"></style></svg>`
t.content.querySelector("#outside").sheet // null
t.content.querySelector("#inside").sheet // undefined

That means that the .sheet property is present on the style element, but not if it is inside an svg element.
This is just so well designed. No confusion, no fluff, just clean, easy, and useful. GJ props
I'm not even very old, but I refuse to talk to a computer. That is not a real world use-case to me. At best it is a neat gimmick. Cars need buttons, dials, switches or whatever else has some tactile response to being used.
isn't that what code coverage does?
Oh, the ads going away may be fine for end-users, but it may not be so great for the income statement of Twitter or its ability to meet its (now very high) debt service obligations.
> The boundary commission was problematic

India, Pakistan, I am seeing a pattern.

Even if you get independace from england, you won't leave in one piece.
this guy is completely misapplying the Pareto principle. if you lose the devs that are responsible for 50-80% of the work, your company is crippled.

another point is twitter isn’t a pure tech company…it’s an ad business on a tech platform. if all the sales and content people quit or are fired I question the long term (2+ years) survivability especially with 10+ billion in debt and annual 1+ billion loan payments
I remember reading reviews of DVD players to find the ones that "slipped through" testing with things like ad skip and "direct to menu" and "direct to feature" options that you could enable.

Those players were always the best.
Anecdata: I like that it's now much easier to locate the next lesson you were doing if you chose to do them in order. Having gotten all of the French lessons to level 1, it always scrolled to the bottom, no matter what I had just done.

But what I don't like is that there is now exactly 1 thing to do. I used to like being able to choose between a regular lesson and a story. I find the stories easier, and sometimes I'm in the mood for one. I liked that they were always accessible.

Today... I had to do a lesson I found oddly difficult (even though I've been exposed to all of the material). I actually failed it, and had to buy more hearts or I'd have broken my (very, very long) streak.

Buying hearts was just a teensy bit aggravating, but the dearth of options was a bit confounding.

If it were me, I'd love to see them just bring back the "stories" tab and leave everything else unchanged. Though I hope they do some thought rather than just reverting or hastily patching the UX. They do so much good work and it's worth them thinking it out.
> nothing beats Blu-ray UHD disks

Uncompressed 10 bit YUV444 UHD at 3840x2160 and 60fps runs at 15gbit a second, so you aren't getting a complete compression artifact free viewing experience. The largest UHD blueray will only deliver at 1% of that speed, and if you could cache it you'd get less than a minute's worth on the disk.

Now you might think that the compression you choose is suitable, and perhaps you'd be right, but it's not 100% compression artifact free, and realistically you aren't going to be seeing uncompressed UHD outside of a broadcast facility. When I stream UHD from say a music festival, I'm compressing it for the WAN section to around 120mbits of h265 at 2160p50 (europe). Even with that level of compression (15:1) it's likely better than your UHD disk.
I use it to send SMS from my phone.

- fetch SMS text and number from application API.

- send from local phone.
Not to mention Show HN: Atto – BASIC computer that runs in the browser - https://news.ycombinator.com/item?id=27724236 - July 2021 (71 comments) (shameless plug ;D)
I’d give the first price for worse DVD UX to the original Harry Potter 1 DVD menu.

In order to see the deleted scenes you had to race a broom through a maze in the forbidden forest selecting the correct way each time.
I had low expectations for this when I clicked the link and saw the spinny-rotatey loading ring (which for informational sites usually portends a wasted journey) - but I have to say this is one of the coolest things I've seen in a long time! I think an FPGA-based implementation of this or something similar might end up on my projects list in the not too distant future...
Optogenetic visual prosthesis for blind patients due to photoreceptor loss
That sounds like you're either running your HVAC at extreme temps or have very poor insulation.
US offshore oil and gas installation at 'increasing' risk of cyberattack
Sampling bias. People that have something going on would be spending more time in the bathroom.
Privatizing California’s Water – Documentary
Pal: Program-Aided Language Models
Program-Aided Language models (PAL) is a new method that uses the LLM to read natural language problems and generate programs as the intermediate reasoning steps, but offloads the solution step to a programmatic runtime such as a Python interpreter.
> the determination of whether requirements were met also being automated.

That seems like the sticking point. Most likely, someone "fulfilling" the contract would try to fool the (publicly available) verification code, rather than actually providing a PostgreSQL instance. It would be hard to create a bulletproof, automated way of verifying that something is a fully functioning PostgreSQL instance with working backups. If verification code was shared across many contracts, any bug discovered in that code could allow someone to wipe out the entire market.
I use Windows but I never see any ads because I customize my Windows installation with some tools that you set up once every few years.

Unfortunately because the HN crowd never uses Windows they don't know you can do that and think we're all forced to play Candy crush on boot up or something. Anyone with a modicum of computer skills knows how to remove the ads and other annoying shit.
Me?

Because "home", for me, while I've been working remotely since 1994, has been Indiana, to Puerto Rico, to Budapest. I go when I want, do a little schedule juggling maybe. And now I live in the tropics in the jungle on a mountain coffee farm - the best place to spend a global pandemic - and I still have an income.

I'll take my seclusion, thanks.
> > Client money is segregated in special bank or custody accounts, which are designated for the exclusive benefit of clients of IBKR.

No, originally you talked about segregation between crypto and non-crypto. I responded that there is no such thing. You then changed to talking about segregation between client finds and company funds -- do you see how this has nothing to do with the original point? How do you know a brokerage doesn't have both crypto and non-crypto liabilities? You don't. And the non-crypto can be senior to the crypto. There is no segregation between non-crypto and crypto and no guarantees about what kind of liabilities are held by both clients and investors.

> if no money or stock is borrowed and no futures positions are held by the client, then the client's assets are available to be returned

Right, this is exactly why you need to know what all the off chain liabilities are. Because when they come due, you can lose all your crypto because of a brokerage's off chain liability. Thus there is no such thing as a proof of solvency.
The Apollo missions took only 3 days to reach lunar orbit. Why is this taking longer?
Poland to put German Patriot missiles near border with Ukraine
> If Musk can add functionality, like payments, crypto, markets

He better start hiring quickly then. The current skeleton crew is, at best, enough to stop Twitter from imploding.

I'm hearing of whole teams wiped out, and other teams having just one person left (now permanently on call), which sounds unsustainable on multiple levels.
Customer-facing people, more generally. And I think this codifies why the google-style customer service is so jarring: the “shock” is just a loose spring which easily bottoms out its travel: before it hits the limit, no feedback from outside the system can travel into the system; and after it hits the limit, the feedback is largely limited to giving up and going somewhere else.
Using the definition of blockchain as: "A blockchain is a type of distributed ledger technology (DLT) that consists of growing list of records, called blocks, that are securely linked together using cryptography."

Then, no, you don't need "blockchain" for that. You don't need it to be distributed. You don't need them to be linked using cryptography. In fact there are good reasons not to use blockchain, such as "I don't want my competitors seeing the exact details of my business transactions". I've heard, "oh but we can fix that with encryption", and then silence when asked "so how are you going to distribute those keys?" etc.

Looked into this for large medical supply chain company. Blockchain isn't merely no use, it's actively unfit for purpose.
If your employer makes you pay for coffee, you need a new employer. I know companies with terrible reputations on HN that nevertheless have free coffee and tea.
As far as I can tell, they are allowed to read envelopes without a warrant:

https://en.wikipedia.org/wiki/Mail_cover
Yes, If you were reading DrDobbs at the time, you would know that they actually tried every algorithm in the computer graphics bible (and they reported about it in that magazine). Some algorithms were in fact better than BSP, but were a bit instable performance wise (better avg performance, but worse worst case)
I used to buy more Blu-Rays but some TV series have stopped disc releases, presumably to drive streaming, or just aren't worth buying.

Expanse: Season Five, specifically: why must I get Prime when I've got Seasons 1 - 4 on disc? And who's gonna buy GoT S5-8? Westworld S4?

I've got no comment on any increase in DVD sales, though. That's not my market. I only rip CDs (which skip like crazy, while I've literally never had a disc issue with DVD/Blu).
Well if you're dealing with a struct then the compiler will provide type safety if say you try to access a field that doesn't exist. You don't get the same safeguards when dealing with raw bytes. Admittedly in C you can also run into these hazards with arrays and strings, which I why I suggest using non-standard array and string types which actually store the length if you insist on using C.
I can add smart locks to my home alarm system. Which is also a subscription, of course.
tosh submits wikipedia links for karma points. Don't see why this person always does this. Really old ones too.

I flag every single post.
> I think we should give the developers the benefit of doubt and assume they were acting in good faith and try to see what could be improved.

I feel like there is this trend of assuming any harsh criticism is bad faith. Asking why industry standard $SECURITY_CONTROL didn't work immediately after an issue happened that should have been caught by $SECURITY_CONTROL is hardly a bad faith question.
yeah, but it was trivial to implement E2EE, and I'd expect such a recent protocol to have it
Scientists Don’t Agree on What Causes Obesity, but They Know What Doesn’t
I wonder if one possible solution is making things more "the Unix way" or like microservices. Then instead of depending on some super specific inputs to reach deep into some code branch, you can just send input directly to that piece and fuzz it. Even if fuzzers only catch shallow bugs, if everything is spread out enough then each part will be simple and shallow.
This is absolutely deranged and I love it.
That's at 2pm. 11 hours before 1am. What is so critical that they still need be there at 1am? Whose going to die?
I've never heard of one either.
The first time I was introduced to an uncertainty principle for the DFT was in time-frequency analysis which exists due to not being able to know both time domain and frequency domain information simultaneously. There is some shared concepts from QM, but they are not the same thing.
Do you have my comments bookmarked or something? You reply to me with something negative to say far more frequently than if you came across them randomly. Can you give it a rest if you can’t manage to tone down the snide please?

As other comments say, including the original comment author, game engines actually do still rely on their own space partitioning to reduce draw calls. Source 2 just does it quad rather than binary. Source is still used in actively developed games and is still BSP, so it’s not true that the techniques are not relevant.
> SpaceX needs to try and turn a profit, so they have a different set of incentives to NASA.

How so? Surely if NASA can do something cheaper it should have more money to do other things or find it easier to get money for more things?
This sort of analysis is common in the financial "advice" (sales, really) industry, but makes no sense. You shouldn't start from your income while working, but from your expected expenses. For example my 3 person household has about 40k/yr in expenses, which is more-or-less independent of my income, given that I make more than that. Once our mortgage is paid off, that will be more like 28k. The average social security benefit is ~18.5k/yr, so that leaves a 10k/yr shortfall at our current lifestyle, which only requires 250k in retirement savings at the 4% rate you're using. Our discretionary spending has inflated somewhat in the past couple years (some of it has been "buy-it-for-life" stuff like furniture), but my wife and I as a 2 person household could comfortably live on just SS once the house is paid off. We'd just be living like we did in our 20s again, and we were perfectly comfortable then. We'd also still have the things we've bought over the years, so really we'd be more comfortable. Presumably there will be some additional health expenses as we age, but as far as I know Medicare isn't so bad that we'd need anywhere close to $80k income in retirement. That additional $10k/yr lifestyle above SS could also be covered by $100/month contributed over 40 years at 7% real returns.

So assuming you can put together a down payment (possibly 3.5% for FHA loans), and assuming you believe in the long term stability of US economic conditions in general, the boring, responsible path to a quiet, comfortable life continues to work even below median income levels.

(This also assumes good health for most of your life. Certainly many people get the short end of the stick there, but many more simply don't take care of themselves.)
Because it's plain and simple manipulation. If it wasn't meant to manipulate the front page it wouldn't alter the timestamp.
TradFi - Anyone can do it without permissions and lie, except regulations force accounting practices, revealing malfeasance.

DeFi - Anyone can do it without permissions, and everyone can see they didn't lie.

Crap-coin FTX Crypto Bros - Let's lie, do "TradFi" and call it "DeFi", comply with no regulations or accounting practices, and steal the Crypto. What could go wrong?

HN low-research "Eternal September" Bros: Told ya Crypto was all a scam, yer dumb!
First we need to decide on the definition of "Russians". Is it anyone born in Russia or USSR? Anyone that speaks Russian? Anyone that holds a Russian passport? Has ever held one?
I have a need for something like this "WatchMinder":

https://watchminder.com/shop/watchminder3

It's pretty good, battery lasts a month, but it has a stupid limitation: the programmable reminder messages don't allow numbers, only letters.

Also, it's nice that you can program the watch directly, but a smartphone app or laptop would make it easier: I would be OK with a USB cable from the charging station in lieu of Bluetooth.

Smartwatches should be able to provide this function, but they don't. For example, reminders should repeat until acknowledged. (Text messages on phones should do the same thing...)
My recent discussion https://news.ycombinator.com/item?id=33596779 was intended to push back on this sort of rosy outlook.

I suspect companies that struggle to hire have basic issues like a complicated or invasive application process, niche skillsets, an out of the way location with no possibility of remote work, or low pay. To be clear I don't mean low pay as in lower than FAANG, but pay so low that you have to wonder if the job is either abusive or something like IT help desk, not software development.

If these regional trucking companies and retail chains were serious about hiring, we'd see posts to HN, Reddit, LinkedIn, and everywhere else like: "I'm the hiring manager at a regional trucking company/retail chain. We've been struggling to hire developers for over a year. If you have over two years experience as a developer in any capacity, email me your resume and I guarantee you a 30 minute phone interview. Pay is a little low but we take care of our employees. We're not used to remote workers but we will make it work for the right person."

Have you seen posts like that? If not, why do you think that is? How are these companies trying to find employees?
Celsius Failed to Set Up Controls to Track Customer Funds in Some Accounts
One thing I've noticed is that many DVDs look like utter crap when I watch them on a 70" TV. The MPEG compression artifacts are very noticeable; unless the DVD is compressed very carefully.

I just decided that, if I think I'm going to watch something a few times, I'll seek out the 4k disk.
It doesn't necessarily work like that. SLS is expensive in part because it scatters jobs around to various important Senators and Representatives' districts. It's in part a jobs program.
A Liz Truss Moment for Japan?
Goodwill can be a decent source of DVDs, even if some might not work, they're certainly cheap enough.