skysight-inc/HackerNews huggingface dataset:
I think periodic off-sites (or on-sites in the era of remote) are incredibly valuable even without a specific business issue to address.

It's easy to say that strategic thinking and planning should be continuous, but in reality there's always a storm of immediate tactical tasks sucking up your attention. That's true for both software engineers (living in Jira tickets, sprints, and one-to-two quarter projects) and the c-suite.

These sessions can force you to make time, put aside the tactical noise, and think.
At least last year I was seeing problems where having Explorer open in a directory would block an app from moving or deleting that directory. So if it was using oplocks then, it didn't seem to be working.
> Sure, you won't get iphone, porsche or gucci wares for that

This is where your argument breaks down. Russia imports vast amounts of manufactured goods that it doesn't have the capacity to make itself, including basic military and basic consumer goods, and for which it needs something that their trade partners might conceivably want. Which ain't roubles, for the most part.
> It's about libel lawsuits. They stay factual rather than share the interpretation of knowledgeable insiders.

Like with Nick Sandman or Rittenhouse. runs off cackling
Intel is still holds the market on laptops and desktops at about 3/4. They simply push more volume. TSMC makes desktop chips for Apple, but Apple isn’t the majority. The rest of TSMC’s production is almost exclusively GPUs and phones, and this could change. If Intel executes well on their next nodes, and should TSMC slip at all, Intel could pull ahead. Never count Intel out. People thought Intel would die after the z80 ate their lunch, after the Athlon 64 ate their lunch, and now they say it again… I think it’s all just noise.
No, there are no top engine moves in practice, and in theory.
I prefer the idea of a solo offsite better. Well, something between an offsite and a holiday. A time to think deeply about your business / market / customers / future, whatever it is.
One plant does not change the game that much. You still need TSMC to keep working on whatever the next tech will be as well as all their current production in Taiwan which is fully booked.
Prevent Crooked Teeth – Why are teeth crooked?
My whole speculative checklist on the matter is now
confirmed about as accurately as I could ever hope for. What a lovely feeling of satisfaction that is
Gobuster is a fast brute-force tool to discover hidden URLs, files, and directories within websites. Learn how to work with Gobuster in this practical tutorial.
Last I checked, they still didn't have a useful Content-Security-Policy header on their Web Vault (which would prevent XSS), and also didn't have a way to separate "being logged into the extension" from "being logged into the Web Vault".

I... would definitely not recommend them, no.
That's a strategy often used by lawyers: bury the opposing party in stacks of paper, if only to buy some time...
The management class is unaccustomed to this sort of questioning.
Most likely IMO is the media is brushing it under the rug because he donated very large amounts to the left.
Product Red
As if browser vendors never included any shady or incompetent root CA?

For example: https://www.techtarget.com/searchsecurity/news/252436120/230...

Firefox seems to include root CA from the governments of: Hong Kong (so China?), Spain, Turkey, Tunisia, Netherlands.
> They do not need anything there, that has to be bought for dollars or euros. They are not some third would countries that have to buy their weapons abroad.

they had their local currency forever. yet they developed very fast exactly at the same time as we started buying their goods. its not a coincidence. and yes China is a third world country by all metrics, its not because you have very modern centers like Shanghai, Beijing and more big cities like that that there is not utter misery in the countryside that would make you blush
> spinning it as being much more friendly to Sam than it actually is

That’s because spinning the notion of “they” being more friendly to Sam implies a shadowy conspiracy, which is much more interesting than other explanations.

Cotton’s razor: The most boring explanation is the most likely explanation.
Maybe it’s an accent
83% of Developers Suffer from Burnout, Haystack Analytics Study Finds
It's not about getting it reported exactly like I want.

Don't you think it is an interesting question to ask yourself, "why they report it like that?".

"Avoiding libel" doesn't cut it, there's other ways of avoiding libel that don't look like a love letter.

Why? Why is it in the reporter's interest to protect this guy? That is the interesting question. I don't need to guess at why reporting on Ukraine or Trump is the way it is, it's pretty clear.

But with this guy? Why?
Where do adjoint functors occur in CS? They occur in advanced algebra, and they occur in topology, but where else? And indeed, the fact that they preserve limits/colimits may help speed up communication and thinking. But I'm not seeing CS connections here.

https://en.wikipedia.org/wiki/Adjoint_functors
I wonder if a move that checkmates is scored lower than a move that checkmates and captures.
"Third-party cloud storage service" -- left an S3 bucket open?
My funniest experience as a pleb on the other end of an executive off-site working in product was being handed a detailed roadmap for the following year, which I had no input on and was politely told to shut up when I raised concerns about it. Specifically why wasn't "Big Feature X" that's been a point of emphasis for the past 4 months and that you made a big deal about being a top priority when I was hired missing from the roadmap? Nope, my job was to "deliver" not to ask questions.

Three (3!) weeks later, after adjusting the teams workload to focus on the new roadmap in conjunction with the Head of Engineering and getting approval on the new plan from the CTO, CFO and VP Sales I get called into a meeting with the CTO, CFO, CEO,, COO, VP Sales, and Head of Engineering, aka the group of Big Brained Leaders who came up with the roadmap that I was responsible for delivering but not allowed to comment on. They then began to attack me over "Big Feature X" - why is it not there, when can we deliver it, how it's my job to define the roadmap and it's unacceptable that we don't have "Big Feature X"...
Why do we even want cutting edge fabs in Europe? We have no companies that design cutting edge logic chips here. Literally none. Why invest 20 billion dollars (or what is the price of a cutting edge fab these days?) to create supply without demand?

Or do we seriously expect that US companies will generate significant demand even though TSMC and Samsung are already building heavily subsidized fabs in the US?
Risky playground
Don't want to start a fight, but honestly, I only ever hear those types of arguments from people who don't use Apple hardware.

People who do, in large majority, do it for two reasons:
- build quality;
- it mostly just works.
Why would you want to pay more taxes and become uncompetitive if you can avoid it?
The bad managers have already been seen through the pandemic. The good ones will adjust to remote or hybrid scenarios accordingly.
This is plain decoding of a trusted string:

utf16 decode
if (unit <= 0xD7FF || unit >= 0xE000)
/* one unit */;
else
/* two units */
utf-8 decode
if (unit < 0xE0) {
if (unit < 0xC0)
/* one unit */
else
/* two units */
}
else if (unit < 0xF0)
/* three units */
else
/* four units */

UTF-16 will take one comparison for all characters up to 0xD7FF; UTF-8 normally takes two. Same when encoding:

utf16 encode
if (value <= 0xFFFF)
/* one unit */
else
/* two units */
utf8 encode
if (value <= 0x7FF) {
if (value <= 0x7F)
/* one unit */
else
/* two units */
}
else if (value <= 0xFFFF)
/* three units */
else
/* four units */

(We can tune UTF-8 it to take one comparison for ASCII if we expect mostly ASCII.)

Things get even more complex when we are to read an untrusted string. In UTF-8 we have five byte types, invalid bytes, conditionally invalid bytes, and must recognize surrogates (as errors). In UTF-16 all 16-bit units are valid and there are only three unit types: character or surrogate, high or low. I once wrote a decoder for UTF-8/16 and here's my stats:

UTF-8 : 13 byte types, 13 states, 10 actions
UTF-16LE : 3 byte types, 4 states, 5 actions
Players only reference the engine to resolve a claim, after the move has been played.
I have. Sure, the contacts are in the profile.
I really love this site’s design and the creator’s YouTube channel and website:

https://youtube.com/@NODEtv

https://n-o-d-e.net/
Vatican website down in suspected hacker attack
Toyota builds trucks in the US because of the chicken tax.

https://en.m.wikipedia.org/wiki/Chicken_tax
Western reports have to be taken with grain of salt; it was demonstrated that western journalists know exactly zero about the war and what you read is more wishful thinking than news. For example, there were reports of Russia running out of gas in march, and out of ammo in april, and our (I'm EU citizen, that's why "our") Ursula was talking about cannibalizing chips from wash machines. And yet, here we are, this all turned out to be nonsense.

Same goes for "iranian" drones. Iran would have no idea how to start integrating them with russian C4ISR (note how the "mopeds" are observed by lancet drones); non-integrated drones would be OK for tactical, but not operational level of war-waging.

Russia is closest thing to autarchy that you can find on this planet (US isn't even a player here, US deindustrialized itself in the name of cost cutting). The 2014 sanctions only helped in building such economy. Medicine is easy to clone, if you are not bothered with intellectual property (see also India) and they are net food exporter. Sure, some french cheese or wines could be missing, but they are not necessary for the war.

But back to our topic: none of this means that buying energy is financing the war. It is there for conditioning western population to get used to more expensive energy (basic economic theory: the supply was cut, demand was preserved, the equilibrium moves). The oligarchs are going be laughing all the way to the bank. It is just surprising that someone with intelligence to be discussing on HN would be taking part of such conditioning, without realizing it.
> Europe is doing pretty good

For this industry, you want as many verticals as you can to ensure supply. Have the early parts of the chain is great, but producing the end product is necessary too.

You also see this problem the other way around, when a US company produces a chip design, but then actually gets it fabricated, packaged, integrated into a product, boxed, all in another country
Not confusing at all... /s
> All of that is just gone. There was so much animation and interaction and fun that has been replaced with boring, text, images, and videos.

This might be partially a fashion thing: people want the flashy interactions less. I for one appreciate some boring text with minimal animation! Also away from games where animated interaction is part of the point, designing a good animation that works better than text+images is often not as easy as many think, and you need to contend with that before you attempt to implement the design.

As there are less people wanting to make the animations the tools that would have replaced the tooling for flash (but outputting SVG+JS instead), of which there were a fair few in active development at one point, have languished unloved and incomplete – so not only do fewer people want to make such animations but those that do want to don't have easy tooling to do so.

There are a couple of e-learning sites out there using interactive animations to illustrate their points, one often has sponsor spots on a couple of podcasts & video series I follow though I forget its name ATM. I wonder what tooling they use, if any (though I doubt it is all manually coded).
The car industry still will have some competition going on so there is a good chance you will be able to avoid subscription (traditional aftersales excluded). Big tech? not so much.
> PGP only solves that if I already have verified keys, which is the hardest part left unsolved.

But you've opened your bank account in person. When you got the token to login to the bank website they might as well ask you to sign their certificate since you are there.
I'm still sharing because I find the result interesting, but keep in mind that:

- Calling this a study is a bit of a stretch, it's a glorified poll that took place over the course of 2 days,

- n = 258, all in the UK

Actual study link: https://haystack-books.s3.amazonaws.com/Study+to+understand+...
Remote code execution.
Hi, During my daily talks within the web scraping community, I have the gut feeling that we’re scraping all the same websites. To prove so, I decided to create the first Web Scraping Website Ranking, an anonymous poll to understand better where the web scraping professionals are putting their efforts. It would be great if all the people involved as a user or as a data providers share the name of the websites they are working on, in an anonymous and safe way.
The results of this poll will be used as an input for a series of reports about the web scraping industry.
It almost sounds like it believes it
The vulnerabilities in Apple’s code that jailbreaks exploit make your iOS device less secure.
The paradox is that kids are sexually active from around 13, yet it's almost illegal for them to be so
It's also the exact opposite of what you want in a certificate authority. You want simple, secure, and dependable, not complex, hard to verify, and easy to game.
Darn you Bjarne!
Since when does the US government care about costs exactly?
> Or do we seriously expect that US companies will generate significant demand

Yes I think so, presuming that there is not an over-supply of capacity.

US companies would much rather rely on an EU country than one that is being threatened with invasion over a small gap of sea. US local supply will never be enough.
It’s excess deaths. If you don’t know what that means, Google is your friend.
If you mean browsing web, the freedom I talk about allows you on Android to install Firefox and ublock origin (and other plugins), which is more privacy friendly solution in-the-box than Apple will ever allow to be installed on any Apple device. If you mean apps installed its your choice what you put on your device.

Lets not forget the stuff you (and most of us) so loathe is direction Apple is actively heading for few years via their own ad-space. Truly surreal discussion.
There isn't a good guy here, they are all just blaming each other and trying to take the moral high ground in order to make more profits for themselves.
Yes, because Twitter boils all down to trans people having a safe place. Only a man could put on a dress then claim to be the most marginalized member of society.

Hello extremes!
Some direct links if folks are interested about how it works: scope extraction is in js-source-scopes, which uses SWC behind the scenes: https://github.com/getsentry/js-source-scopes

The more user friendly and performant version of it is available as part symbolic: https://github.com/getsentry/symbolic/tree/master/symbolic-s...

Which is also exposed to Python so you can use it from there if you need: https://github.com/getsentry/symbolic/blob/master/py/symboli...

Happy to answer questions :)
Spending money that would be wasted on the shareholders anyway
Does that usually happen? People escaping media scrutiny by donating large amounts to the left?

Are there any news outlets outside of the US that wouldn’t be affected by these insidious US leftist institutions that should be reporting on it?
Wasm support tracking issue:

https://gitlab.gnome.org/GNOME/gimp/-/issues/6817
I get that many individuals and companies see taxes as wasted money or theft, but taxes pay to fund the education of the workforce that will work for said corporations and fund the infrastructure used by said corporations to build and transport their goods, including stuff like courts which companies can use do protect their IP or military force projection to protect their assets and investments abroad.

Without the skilled workforce or infrastructure the company will for sure not be competitive.

What most big companies are now doing to get insanely wealthy is have most governments foot the bill for the infrastructure, protection, and education of their workforce, while all the profits from the fruit of their labor go directly to shareholders and the governments don't see a dime in taxes so stuff like education, healthcare and infrastructure is falling apart while corporate profits have never been higher.
Einstein completely transformed physics with some stand-out papers - most written as a patent clerk - and then spent the rest of his career producing almost nothing of interest. He commented on other work at conferences and in letters, but there were no more huge breakthroughs.

In modern academia that would be a terrible record.

But giving him tenure was a smart bet, because he might have produced more.

It's the Sabine Hossenfelder problem. Should physics fund incremental research which is a fairly safe bet in employment terms? Or should the money go on talented and creative researchers who may waste most of it - but one or two may produce something transformative?

Academia is heavily slanted towards the former approach. Because academia is now a business and has the same bureaucratic and corporate values as other bureaucratic corporations.

This is terrible for original research, because smart people need to given a free hand to follow their intuitions and interests.

Being able to afford to explore, play, and potentially fail would transform physics.

Because in reality academia is producing a lot of failure anyway, without the upsides of transformative new insights.
Why are root CA authorities holding on to private keys and sending them around?

https://www.techtarget.com/searchsecurity/news/252436120/230...

The "trusted" party sometimes fails spectacularly it seems.

> hellbunny.com, a website I have no direct connection to,.and isn't that famous.

And what do you know about that certificate? That some root CA signed it. Do they follow a proper process?

I don't care about random websites. For those letsencrypt is fine. But for banking or paying taxes I want some more checks done. And they aren't provided.
Meet Japanese government.

https://groups.google.com/g/mozilla.dev.security.policy/c/Me...

Mozilla: There are some misissued certificates. Revoke it.

Japan: Nah, you can trust us. We are government. It will expire soon anyway.

Mozilla: That's not an acceptable response. We do not trust you. Have a good day.

Japan: Wait. We will revoke. Just kidding. Please trust us.

Mozilla: Too late.
> that it doesn't have the capacity to make itself, including basic military and basic consumer goods,

They do have capacity to fully cover their entire military needs.

For consumer goods, they are trading with China, India and other countries in a mix of currencies, that includes rouble.

The freezing of their USD and EUR assets was a huge mistake; it demonstrated to the world that such assets are not safe.
So you’re ditching an epistemological rule of thumb for the 21st century’s favorite understanding instead: it’s a shadowy conspiracy!
All the figures include flu deaths. Including the pre Covid figures.
Where time is measured in the number of positions evaluated.
>>removing a screw behind a "non reversible loss of warranty" sticker

Well that would be in violation of existing US Federal Law
> uncovered a flaw in the system

I will argue it is not the a flaw in some random aspect of the system, but the main propose of the system. Which is to vet companies they trust to distribute it through CA signing.

Do you think I will buy from a restaurant after finding they had expired food? Good food is the reason I'm there in the first place.
who says there is only one way to invade Taiwan? a maritime blockade would be super effective to suffocate Taiwan in a matter of months and destroy their economy.
Yes exactly. If I thought Apple was trying to lock down the Mac in the same way, or shift away from the Mac I'd feel differently. But I see no evidence of that. I'm quite happy for my phone to remain an appliance.
If you can check your opponent, giving them only one legal move, you win (because it is the top engine move).
Not criticizing. This is what Ultimate did in Knight Lore https://en.wikipedia.org/wiki/Knight_Lore, and it blew everyone’s minds at the time.
lol your overstimate the Chinese tech by a generation at least.
I guess its that the Japanese Company can make cars profitably anywhere but making cars for the US market in the US means there's no/less import taxes, also because the factories are huge they often get local tax breaks, and the cars may also eligible for EV/hybrid tax credits (I think Toyota have sold over 200K so there cars can no longer get this).

I think making cars in Mexico for the US became less worthwhile when Trump pulled the US out of NAFTA.
If the thread you are on doesn't modify the variable (e.g. by const_cast), and that variable isn't atomic or volatile, the compiler should be allowed to treat it as invariant. Whether it does in practice probably depends on a lot of things though.
Not only whataboutism but also broken analogies. I can't think of a proper analogy to the market power that Apple holds by having the whole platform coupled with devices that people don't have that many other choices (Android vs iOS, that's basically it). I can always try to twist the analogy to bring it closer to the actual reality of the issue at hand but it's always an uphill battle to dismember it and re-create the analogy more similarly to what's actually the problem.

Sometimes I wonder if it's really other's ignorance about the reductionist analogy being broken or if they're maliciously using it to misrepresent the point made.
Well the current system we basically sign everything as long as the domain on the certificate matches what's registered on the DNS.

If the certificate says "Company AB", nobody checks if that's true.
It is obvious that inventing the CA business was a mistake, in retrospect. Netscape wanted nothing to do with it in practice.

What we should do is to delegate the few CAs that legitimately do non-domain validated certicates for specialized applications to only this. That includes things like signed code. Things like extended validation was invented solely to print more money and should be phased out of web browsers. They are not "more secure" and should not be regarded as such in any user interface.

The parties to issue domain validated certificates should be the domain registries. They do their job reasonably well already. They are already tasked with issuing domain ownership. It is only natural that they should validate this ownership cryptographically as well. It is a trivial extension to their business, and the registry/registrar model can be kept intact.

The trust chain for a domain validated certificate today includes both the registry and the CA, and either can fail. The risk is strictly minimized by removing the CA from the equation. CAs provide no value to the end user.

You will find several high profile people arguing against this. Do note that every one has vested interest in the status quo, either directly or indirectly by having CAs and governmental agencies as their clients.

How do we change this system? Mozilla has by way of their history some weight in these matters, and several capable people on board. It is my intense hope that they have a long term plan. Let's Encrypt is, as great an achievement as it is, still built on a broken trust model. But it could also be an excellent beachhead into a strictly better trust model for the end users.
If money was the driver the US would be first, not Taiwan.
can't help but shake my head as I read about Feynman turning down a fancy job to remain in academia, at humble Cornell (and later, Caltech I guess).