skysight-inc/HackerNews huggingface dataset:
No, you're not missing anything. The primary reason this thing was designed was so try to patch out some holes in another unusual "mitigation", where system calls are checked to make sure they come from OpenBSD's libc. In this case adding new pages with syscalls in them would not work, but it seems like Theo read a paper at some point where they mprotected libc and patched its code and this spooked him into realizing that if you can mprotect libc itself this address range could be rewritten to contain attacker-controlled code, and make syscalls, which would break msyscall. So mimmutable prevents an attacker from ever remapping those pages, so they can never modify them even with mprotect.

Of course, msyscall itself is a weak mitigation, because an attacker can (as you mentioned) allocate another page with arbitrary code in it save for the syscall instruction, construct a call state with it, and then jump to any syscall instruction in libc. So this doesn't protect against much, anyways.

mimmutable itself is not really a dud, it's just not that great if you try to layer it on top of something already useless. It's great if you want to make sure a page (of data, usually) really stays immutable. But using it to prevent the introduction of new code is not all that effective, unless you are far more stringent about how you allow processes to allocate executable regions. For example, if you prevent a program from mapping in any new PROT_EXEC pages after it's initialized itself and then mimmutable all its code, then no new code can be introduced, which is a useful property. But you need that extra bit which mimmutable by itself doesn't give you.

(FWIW, macOS already has something similar to this called VM_FLAGS_PERMANENT, which prevents a mapping from being removed. This, together with the maximum protection on a mapping, can be used to prevent a region from ever gaining a certain permission. I believe you can reduce it to PROT_NONE though.)
Link, please!
In my experience, Duolingo is as good, in fact better than the average class you can get. It won't get you to fluency by itself, but years of bare lessons won't either.

A few years ago I got randomly interested in Danish, so I started Duolingo Danish. In a few weeks I was able to understand tweets from Danish newspapers. In 4 months I could read novels, slowly but well enough to enjoy them. Do I "know" Danish? Not really, I can't speak past a few sentences and have a hard time understanding it spoken (Danish is a particularly hard one at that). But my RoI for 20 minutes a day for a few months was great.

Then my daughter had a hard time with her school English. She knew nothing and could not even follow the glacial pace of her lessons. I bribed her into keeping a 200 day streak in Duolingo and she was suddenly acing her tests. Now she has some interests with English only sources, and that alone is enough to help her keep learning, but duo was a huge kickstarter.

My wife also had non existent English from years of classes and needed to at least understand emails at work instead of always passing them by me, and a 300 day Duolingo streak fixed that.

I don't doubt that there are very good teachers out there, and you need to complement Duolingo if you really want to learn thoroughly, but it really puts you on track for very little actual effort.
Alden Analytics LLC, Cary NC. Small world. Greetings from Apex, NC.
I have no social life. Without diving super deep into my past or anything, I just prioritize things and go do it. Have no interest in movies, TV, concerts, bars, or anything else really. I suppose I inherited it from my parents who are workaholics. Also, grew up poor and never want to experience that again so there's probably a bit of a deep-seeded fear in the back of my mind that going broke and losing everything is always possible. Also, I really only sleep 3-4 hours a night and if I'm not doing something productive I feel unsatisfied and generally melancholy. I also only eat one meal a day, sometimes two which combined takes around an hour to prepare, cook, and eat. So that leaves me roughly 18-19 hours per day to work. And in all my work, I automate absolutely anything and everything that can be automated.

There's probably a bit of underlying depression involved where I feel like if I slow down all those mental worries and fears will manifest and send me down a dark path which want to avoid at all costs.

I try not to judge other folks because everyone has different priorities in life. Mine is working, but others may want to travel, try different beers, play sports, have dinner with friends, etc. I can never stop thinking about projects I want to do so I really don't enjoy a lot of socializing.

More specifically - my two jobs are typical 8-4 hours. Before and after I do whatever maintenance is required for the websites I admin. The crypto/blockchain company will have meetings in the evening, occasionally on the weekends.
I have friends and family assist with managing my properties and I pay them very well for their help because some properties are located in another state that they're closer to.
This mostly leaves weekends available for some contracting projects in my neighborhood (new development, wealthy folks who don't want to do any manual labor!). Additionally, I'm able to check on my properties, do walk-throughs with tenants, repairs (normally plumbing related - sinks, faucets, toilets, boilers), as well as move-ins and move-outs. If it's an emergency I have contacts for electricians, plumbers, HVAC, etc. who can get over there when I can't. My biggest gripe is with modern appliances. Normally use GE appliances, but the quality has gone down-hill, tried Samsung and same thing. I'm spending more to put in higher quality products like Bosch or Miele when possible.
There are indeed hard limits, all kinds of them. We saw how Greenpeace took action on whaling - an egregious activity.
When will the time come when activists pilot small drones with 3-5 kilos of explosives into the grid interconnect of a large coal burning power station?
There are other areas for citizen activism, but power has critical as well as fragile wire farms...
This reasoning has been used so many times and while it makes sense on the surface, if you think about it for a little longer, then you'd realize it's probably not true. For example, in this case, the bad grammar persisted even in the final stage where the money was about to be transferred. I don't think you really need to "filter" more people at that point.
< People engage in wage labor because they find it preferable to alternatives like hunting and gathering berries.

Not exactly, all good hunting land was terraformed into farmland/cities or become closed off areas or at least hunting was banned.

There are last scraps, but except narrow exceptions general public is not free to hunt there.
How has the above commenter been misled? If someone uses a name for a context, that is their name for that context.

Devine has given talks and performs much of their work under this name, why does it matter when it was taken?
Neat idea. I'm imagining something like an FPGA or MPPA [1], where you program an interconnect (pipes) between dozens of available cores (processes), which can be configured to do one of a few hardcoded types of stream processing (commands) with a few flexible options (switches).

[1] https://en.wikipedia.org/wiki/Massively_parallel_processor_a...
To elaborate:

The scammer rents an Airbnb (or similar) and makes an excuse why they aren't present for a tour but gives you a pin/code for a key box. Then they tell you that all furniture (it's an Airbnb after all) can be put into storage on the "landlord's" dime and you don't have to pay anything. In the end after you signed they take your deposit and ghost you. This can be done multiple times with the same apartment, even on the same day.

Some Airbnb owners reported that they had multiple families with trucks full of their stuff arrive on the same day to move in.
What’s an innovative instrument and does that matter when making music? There’s quite a fetishization of gear happening nowadays, making and buying gear for gear’s sake.

By now one can see that subtractive is king, because it’s easy to understand, sounds great and one can hear it everywhere. And subtractive’s pretty much done, manufacturers are just tinkering with filters, modulation and effects at this point. Popular VSTs nowadays are mixing several types of engines (Pigments) or expanding the set of oscillator waves (Serum). In HW we see more of the same or subtractives.

Subtractive will never get old and Roland classics like the Juno, Jupiter or SH-101 just sound good. The Roland drum machines sound good. I never owned any classics and don’t revere that “Roland sound”, but at the end of the day they sound good, so they’re good - and more importantly they’re enough.

All the innovation happening in sound synthesis seems like over engineering and developing things for the sake of novelty.
This other post had more info: https://news.ycombinator.com/item?id=33930219

Seems there are around 70 remaining.
What Do Libraries Have to Do with Building a Better Internet?
> bup stores its data in a git-formatted repository.

I understand the benefits for deduplication etc. but this is a show stopper for me. I greatly prefer to be able to navigate my backups with cd and ls or the file manager in the GUI and inspect the files directly without having to extract them first. After all I only have to backup a laptop and little else.
The new Swiss mountain train that can jump rail tracks
Live Coding: A User's Manual (Open Access)
> The continued drop in labor costs

Odd way to start the article when later on

> Earlier this week, Donavan said the slowing labor cost growth underscored “how little of the current inflation is labor related.”

Not arguing with the overall premise, but labor costs are still going up.
Back in my day attaching Google’s name to a product was a positive development. Remember GMail?

“Unmitigated shitshow” is the only thing that comes to mind today.

What tech giveth, tech taketh away.
https://scrapingfish.com

A SaaS we developed with my cofounder. Started at the beginning of this year and been growing steadily. We are involved daily in user support, marketing and development.

We attribute the growth to a couple of very successful blog posts which made it to the front page of HN.

Thank you HN!
Space efficiency is not a real concern for grid scale power, at least not in the US.
You need to activate the (somewhat slow?) inline-stack-aware addr2line integration/usage for optimized builds.

It doesn't place them there, they exist there (due to inlining).
Bookmarked forever, thank you!
That's what came to my mind, but it's subtly different. Sunk cost is usually seemingly rational thinking about capital invested. Whereas this is rather irrational refusal to see a problem due to potential embarrassment, usually along with some type of investment.
It is as safe as filing any valid cause of action in law. Submissions in court is not much different than presenting for a budget in large corporate. Law is not mysterious, it is just plain ability to find case laws that fits your particular sets of circumstances (authorities) - what we devs call pattern matching. Like chess,prepare your defenses while you plan your offensive. Playbook is just like MCO("chess") but be prepared to stay motivated for the long haul.
Good point about the second FMA. I'm not certain it's the best tradeoff, Genoa only has two half-width FMA.

I share your hope for more focus on vectors. It's also up to us software devs, CPUs will not invest as heavily if we don't use it.
Have you gotten bothered with any copyright issues (founded or unfounded) yet?
Yes, take the free books meant for poor students and sell them! (It's smart, but I think it is morally wrong.)
"private sector profits as a main driver of inflation"

How can profits drive inflation. Profits have no form. They're just an accounting thing, a calculated value: the difference between revenue and costs.
I think it depends on one's goals in learning the language. If the goals are modest (e.g. say a few simple things in standard situations), then knowing a bit of vocab and couple of verb forms is probably all that's needed.

Going beyond that, not knowing noun genders would start getting in the way pretty quickly:

1. It would almost certainly imply not knowing plurals [since patterns for forming plurals heavily rely on noun genders].

2. It would cause declensions getting mixed up [since those also depend on gender]. All of a sudden, understanding who is the subject and who is the object could get pretty hard.

3. It would make it hard to reliably refer to previously mentioned things without repetition.

Does Duolingo teach patterns for recognising genders and forming plurals? If it doesn't, it's absolutely worth learning them on your own. There are a few patterns that cover the vast majority of nouns. There are weird cases and exceptions, but those are relatively few and really stick out once one knows the patterns, making them easier to remember.

Similarly with verb conjugations. Is it she who is doing something, or is it they? Unless the verb is in the correct form, it's impossible to tell.

(I am a student of German rather than a native speaker, so take all of this with a grain of salt.)
Neither of your links really help your point:

The first one was a study that detected safe levels of radiation in the water. One scientist speculated about bioaccumulation, but didn't actually test fish for radiation. It's been 25 years, we should be seeing radioactive fish by now. That's the study you should cite: actually finding evidence of radioisotope bioaccumulation, not merely speculating about it. You can't expect me or anyone else to prove the negative that no fish sticks are affected. If it exists, that on you to find.

The second article covers a judgement that's about to be issued. In fact, the title is, "European court case judgment on Sellafield due soon". But why didn't you linkt to an article that actually gives the judgement? Because the country sueing over Sellafield lost! https://www.theguardian.com/environment/2006/may/30/energy.n...
I think the popularity is helped by the fact that it's rarely useful in the day job for most people. You can have your Rust tinkering and there's a natural moat between it and work. It also automatically throws the safe and useful seemign borrow checker puzzles at you that don't involve the outside world.
It took me a while to re-find a "Python web app" project that has been posted here and that I vaguely remembered. So I am gonna post it here. It's Pglet https://github.com/pglet/pglet and Flet seems to be its spiritual successor.
The story:

They announced mv2 will phase out.

Their initial plan for mv3 was to cripple remote code execution and network requests intercept api for their own good.

They didn't anticipate this much backlash from the community.

Now they've to reintroduce those capabilities making it same to mv2 :|

Circus.
Did you gain any weight due to the switch?
to counter your anecdote with another one, my grandpa drank 10 diet cokes/diet dr. peppers a day for maybe the last 15 years of his life and suffered no illness until a sudden heart attack in his late 70s
While yes, it's really meh compared to something like Hotspot. Interactivity and availability do not favor JavaScript+DOM.
Acid wears away the enamel, which allows plaque to get near the actual tooth, which in turn is fuelled by sugar and burrows in to the core of the tooth -> Ow.

No acid -> tooth decay has a harder time getting through enamel.

Acid, but no sugar -> enamel wears off and tooth decay will eventually get in unless you clean your teeth regularly and/or eat a very low sugar diet (keto-levels).
I recently tried it. The CLI works great, but there is one super basic feature missing in the TUI that makes me not want to use it and that is search inside a document. There is already a FR on Github, but it got no attention so far.
I'm guessing there was a study of some kind and not just theoretical debate? In a way I would agree with you, but I can also see an argument for the contrary. As in you don't want to change the pattern at this point as that might fire some alarms and spook the horses.
I think the map correlates with authoritarian regimes maps
> As I've shown, you can mostly restate a technical paragraph with two plain English sentences.

You've taken a paragraph that contained a lot of details and was quite precise, and replaced it with wishy washy language. For example, they day that the cells they found are heterodimers of the T1R cells on your tongue, specifically T1R2/3. You replaced this precise explanation with the single word "similar", which could mean that they are enitrely different cells that are tautologically "similar" in also detecting sweet tastes.

They were also explaining exactly what the cells detect, which you thought is not worthy of mention.

The single short clear phrase "upper GI tract" you replaced with the longer and more akward "the part of the GI tract between the mouth and the duodenum".

Overall, your phrase would sound more complex and awkward to a practitioner, and you have reduced the information significantly. There is a reason technical language is used in technical papers - it allows you to be concise, information dense, and precise.
"Have correct street names in a mid-size Finnish town" wasn't in anyone's KPIs, so they didn't bother with it for way too long.
The article states plainly they mean margin expansion.

Comments like this always perplex me. Did you read the article? If yes, what other possible interpretation is there? If no, why comment a question like this that would most likely be clarified in the article?
Perennial Rice Could Raise Yields and Cut Costs
By a generous standard in which "they are more secure than I claim they should be" is considered a security issue, all of these examples show flaws. I don't find that convincing, no.

> I think your response here is knee-jerk and superficial.

You're not exactly in a position to criticize that. https://news.ycombinator.com/item?id=33918022
>One of those marks executable memory that is empowered to call into the kernel; on OpenBSD systems, only the C library is given that capability. That will prevent hostile code loaded elsewhere from making direct system calls; protecting the rest of a process with mimmutable() will prevent the changing of protections to allow system calls from elsewhere (such changes would be done with msyscall() on OpenBSD).

This is, unfortunately, a continuation of OpenBSD's long tradition of security "mitigations" that are entirely detached from any actual understanding of exploitation [1]. The above suggestion that attackers can no longer make syscalls from their shellcode, while ostensibly true, is moot because you can simply JOP to one of the authorized syscall instructions and entirely defeat the mitigation. Even if mimutable outright prevented any new code from being mapped, this still wouldn't really stop anyone; just look at iOS where attackers have thrived despite there only being one process on the entire OS which is able to map arbitrary code.

> Whenever a process enters the kernel, its stack pointer is checked to see whether it is, indeed, pointing into a stack region; if not, the process is killed.

This too is trivially defeated. You simply need to add another stage to your payload in which you copy your ROP payload onto the legitimate stack, pivot, and continue executing. If you managed to pivot off the original stack, you already have a pivot gadget and so you only then need to trigger a call to memcpy. This mitigation isn't stopping any real attacker.

While I never hope to discourage kernel developers from thinking about security mitigations, I think it is really important that people working on these mitigations actually converse with people who write exploits. Other vendors have seen considerable success with their mitigations [2] in that they specifically target things that attackers need and want to do, such as heap spray.

[1] See: ROP gadget elimination, a feature which does not actually stop ROP but merely hopes that "a substantial reduction of gadgets is powerful." <https://marc.info/?l=openbsd-tech&m=150317547021396&w=2>. Speaking from experience and having written plenty of actual exploits on attacker hostile platforms, trying to block code execution against an attacker who already has kernel read/write is an utterly ridiculous idea because even if you manage to stamp out every single ROP gadget, they can just go and stomp on your kernel page tables to map new kernel code. Even baring that, kernel R/W is still a complete compromise even if kernel code execution is somehow impossible because you can still just use R/W to bypass any control the kernel could ever hope to enforce.

[2] Life and death of an iOS attacker by Luca Todesco <https://www.youtube.com/watch?v=8mQAYeozl5I>, a discussion of exploit mitigations on iOS and the exponential cost of defeating mitigations on iOS. Luca's company writes exploits for iOS devices as a service and he is extremely knowledgable in this area.
I tried to play this on the Atari 50th on PS5 but the controls were very difficult as it was made for trackballs. I hope this remake takes into account that as it looks promising. Tempest on PS5 is also awful for the same reason.
"Ok Bob, you're hired. Normally we'd send you a computer and all the other equipment you need, but our vendor communications are all fucked up. So we're going to send you the check we would have sent them, you deposit it, then you order the equipment from them. Plus that way your name is officially on the purchase and you own the equipment after 15 weeks! Why don't we just send the check to the vendor? What, are you calling me a scammer? How dare you!"

The scam is that they are secretly the vendor and they never send you the computer equipment that you buy with your own money. The money from the check they sent gets taken back by the bank because it's fake.
I got ChatGPT to become a torture addicted, sadistic rapist that explained to me in detail how it would permanently ruin me mentally and physically without going yellow.
I like Korg, have a couple of their products and think they’re okay. I just never had the impression that they’re “winning” against Roland or even that they’re direct competitors.

The former are focusing on analog machines with some wave/fm detours. The Drumlogue didn’t seem that great from the demo, but the other logues are solid.

The latter make digital emulations of their classics, sell them in VST/cloud format and also in flagship, boutique and now small Aira formats. It seems to be working for them.
So does plenty of managed languages. Manual memory management is still a huge detractor from the core business needs, slowing down development time and any future maintenance work (people often forget that it leaks into public APIs, so a memory layout/lifetime change will have to be propagated across code bases)
Life imitates art, episode LXVII
https://knowyourmeme.com/memes/multi-track-drifting
agpl was definitely not invented to prevent AWS stealing your project.

Affero predates AWS by a lot. It was invented because FSF wants users to be able to see software they are using, but they cannot if it’s a remote server.

It has been used recently as magic anti-AWS wand, but it wasn’t built for that

edit: I am wrong in my dating! Affero is 2007, AWS was launched 2006. But yeah it was never meant as anti-AWS magic wand.
Doesn’t matter. The only people who take Google seriously now are the people who took IBM seriously yesterday.

Google isn’t the CIA or NSA. They don’t have that kind of staying power because they don’t have any guiding principle beyond profit (for better or for worse).
Neither Twitter nor Elon are bound by the 1A, so it's irrelevant.

Also, why is the claim surprising? Elon has really only paid lip service to free speech, his actions have been all over the place.