skysight-inc/HackerNews huggingface dataset:
Some of the findings are ridiculous. To highlight the lack of binary obfuscation as a threat (albeit a "low-severity" one) is absurd. Kerckhoff's principle [1] applies. Security through obscurity (or obfuscation) is no security at all. To highlight the lack of binary obfuscation (which, in its maximal form, would be the client being open source software) as a security threat is the "demand" for security vulnerabilities exceeding the "supply".

If you, as a business, make money from identifying security vulnerabilities in applications, then you have every incentive to invent vulnerabilities where not exist. And if you're a client of such a service, then no matter how conscientious you are, no matter how much attention you pay to security, someone, somewhere, will be able to claim that he's discovered a vulnerability if he's able to make arbitrarily hostile assumptions about the underlying platform.

In the limit: "Attack: Program fails to defend against an attack in which Intel specially and secretly recognizes this program's machine code and sends the contents of its memory space to the NSA. Recommendation: Program ceases to exist.". Give me a break!

[1] https://en.wikipedia.org/wiki/Kerckhoffs%27s_principle
Can't speak for the other guy but the latest Ubuntu update absolutely wrecked my desktop. No network, no graphics. It blew my mind because I haven't experienced anything like this in more than a decade.

This experience pushed me straight into rolling release territory but I'd imagine most people would go to MS immediately, or even Apple if PC gaming is not something they do
True, but they are more likely to wear a $400 hoodie than a $200 suit.

Outside SBF, even the executives dressing "casually" are still doing so expensively.
Not to mention how slow it becomes in large projects
I think it's all about "intent" in summary.

After long enough it gets tiring battling people who's intent is ultimately maximum wealth extraction, rather than simply producing a good piece of software.

The intent behind most FOSS projects is just about the software, and sometimes we disagree on what and how (but that's why we have choices)... and some things are a bit creaky and come from different ages and don't fit perfectly together, but with a bit of fiddling and understanding you can gradually accumulate things that do what you want - and so it becomes more comfortable over time, not less, because they don't try to betray you at every turn.
This is a definition of “serious projects” that excludes almost all serious projects.
I was looking for a specific site. But thanks anyway. Grateful
I’ve heard someone say a few months back that a zoom setup is the new business suit/attire. After spending the pandemic working from an unfinished/unheated garage near a loud expressway, I definitely felt there were situations where I was “dinged” for it at a FAANG company.
Grand Central is not "less than minutes away from Penn Station". It's at least a 15 minute commute. Potentially more depending on which part of the station your walking to/from and if there's delays.
>Children know the box is not magic.

are you sure about that?
> Given current trends, I guess I'd say give it 6months?

I'm happy to give it 6 months until the technology is there to do it, if it's not already—but, as long as there's an owner of the technology (that is, as long as the technology is pre- the point where I can easily roll my own), I'm skeptical of any owner in today's privacy climate intentionally forgoing the opportunity to suck up personal data whenever and however they can.
Some of the ones that I haven't yet seen mentioned:

"Oxide and Friends" is a great interdisciplinary podcast with a lot of focus on hardware and low-level stuff, but always looking at a big picture.

"Array Cast" is a pretty unique podcast about array languages (think APL, J, K and friends).

"Type Theory Forall" - podcast about formal methods and type theory, some absolutely great guests there!

I also have to mention "IPv6 Buzz" and in general "Packet pushers" family of podcasts on networking - listening to it helped me a lot when I had to implement some IPv6 functionality at my job and didn't really know where to start.

Oh, and "Machine learning street talk" is just awesome if you're a bit more philosophically inclined.
> That person's interviewing skills are atrocious

I think it's a bit unfair. Overall, I'd say he's a decent interviewer and has interesting guests.

That being said, I find him pretentious, and get a bit tired of some recurring cliches and themes. I'd prefer if he would keep things a bit more "neutral". Also he invites occasionally some crackpots, which would be fine if he'd challenge them more, or invite another guest who can.
Beyond Functional Programming: The Verse Programming Language [pdf]
Code in your own head while taking a walk away from the screen, several days per week if possible.
> This tend to be true for most serious projects, that the amount of test code is greater than that of the code that is being exercised.

Reading this comment, I was thinking "Oh that must mean the test code is 2x or maybe even 3x the amount of source code"

Going to the SQLite web site, I was surprised to find that the test code is 600x larger than the source code. Impressive.

Is this 600:1 ratio typical for other projects? The ones that I have seen are more like 1x or 2x, but I have not worked with many open source systems.
This may be an ingenious way to solve labor availability problems in America by boosting productivity and changing the nature of construction jobs to attract more people.

P.S: That end-effector design could be more..versatile. But still for a first hyper-specific job design. Very nice.
2009 Air France 447. The copilot was panicking and never let go of the controls even after vocally handing them over. The pilot only seemed to realize this shortly before the crash.

The wiki page for it mentions a lot of other issues https://en.wikipedia.org/wiki/Air_France_Flight_447 . Including an offhand remark by the pilot that he only had one hour of sleep and warnings that only sounded when the plane was in a remotely sane orientation.
Everyone does that. MIT too.

At some point, look at the git history for who wrote Open edX, and at some point, look at the git history for who created the first edX course. Compare that to the official narrative, and try to find their names anywhere in PR materials.

https://github.com/openedx/edx-platform/commits/master

http://groups.csail.mit.edu/mac/users/gjs/6.002x/6002x.tar.g...
Genuine question, but what's wrong with the tiling window managers already available for Linux?
Hi!
Thank you for feedback!
We use our own engine on Unity to render videos on the server, and yeah it’s highloaded now. We don’t have the same resources as google earth, unfortunately.
Academia Is the Public Sphere
If you're set up to replace the hydrogen as it escapes then your lifting gas is a fuel you have to buy for every flight in addition to the fuel for your engines and now you're paying an energy tax to haul fuel and lifting gas in addition to cargo. This makes the entire setup an even worse competitor against planes, trucks, and ships.

Many of the ideas we all come up with for airships technically will work and the fact that we keep thinking of these things over and over again through the years speaks to how fascinating the concept of an airship is; however, we've never had a problem making an airship that works. That's the easy part. Making one that anyone would want to use for everyday transport is the hard problem.
That would be impractical
Even better IMO is to use different prefixes for outer vs inner tmux sessions. These are the first lines of my .tmux.conf:

# Use C-a for outer sessions, and C-x for nested sessions.
unbind-key C-b
set-option -g prefix C-a
bind-key -n C-x send-prefix
Where did you end up that is helping people who really need it?
Oh thank God. I've been dying for a way to play my enormous collection of music NFTs, and now here it is at last. What would I do without Microsoft? /s
Only because he already had been in an incident himself already the day before and knew what to do.
https://en.wikipedia.org/wiki/Waveguide_(optics)
Thank you, I did not know this!
and I'll add Range to my reading list.
> And if RAM has to be soldered, then the board with CPU, GPU and RAM could be made replaceable so that you can upgrade it later without buying a new device. Obviously, manufacturers don't want that.

Dell is on a new replaceable RAM standard. It's already been designed for their own products, but they're working with JEDEC to make it a standard: https://www.storagereview.com/review/dell-camm-dram-the-new-...

I also prefer upgradeable laptops over bleeding edge performance but the reality is that most consumers never upgrade their laptops (and if they do, only to add more storage). Until a large amount of customers start factoring repairability and upgradeability into their purchasing decisions, we'll only see soldered down RAM.
There's also Phoenix Exultant by John C Wright, where there are AIs that are basically clones of you that are empowered to make all sorts of decisions for you. IMO it's more approachable sci-fi, but that's not always what folks are looking for.
Right, that's the point of the parent of this subthread. They (the hoodie-wearers) would probably insist that they don't judge based on dress or appearance, but they do, and maybe more harshly than the suit-wearers. It's just what people do. I grew up wearing suits to work, shaving every day, and wearing a short neat haircut. I don't as much anymore, but I don't wear hoodies with pizza sauce stains either, and I don't respect the people who do as much as the ones who look like they at least glanced in the mirror before they left the house.
Yes, waiting for a promotion and maybe some stock vesting, then I can't wait to move.
As much as I love money, I'm financially stable enough. Going to force myself to prioritize other things. Good luck.
At least on the K6 this was implemented in a really neat way. Reusing most of the hardware for CPU exceptions, the store buffers and the instruction queues communicated and would perform most of the work rolling back state, and then instead of jumping through the IDT and pushing the first bit of exception state onto the stack, it just jumps directly to the next instruction after the rolled back state.
Chrome as an example? They had an advert on top of the most successful search engine. Hardly a grassroots effort.

People won't bother with Linux, nor other alternative systems. Many don't even change the desktop wallpaper. The computer works out of the box, as it comes, and that's the end of the customization story. In order to achieve Linux majority, it needs to become the de facto standard: governments need to use it, schools need to teach it, and businesses need to use it. And it needs to come on computers preinstalled, compatible with all these other systems. Otherwise, no dice. The question is not technological - Linux has been fine for a long time now. It has been down to business, and Microsoft is good at business. That's it.
You can hide those commits, you just can't delete/squash them. It's really not as big of a deal as everyone claims.
good idea, now what would be the pros of publishing here rather than pastebin.com for instance?
Maybe in your browser you have that option. Not for me.
> but the infamous 100% test coverage doesn’t make it somehow immune to issues

Infamous in what way? While I totally get that 100% coverage may be impractical for many projects, I’m also not seeing how less coverage would have improved things. And I highly doubt the SQLite team ever claimed they were immune to bugs!
> I don’t know why, but I don’t like that the headline frames it as a “privacy risk”. Are we really concerned about privacy when playing chess?

To the extent that headlines matter, I'd way rather that people worry about the privacy risks of de-anonymizing technology long before it's at the point where it's a practical issue. If we only worry about it when it becomes an actual issue already being, or about to be, applied to unambiguously privacy-invading matters, then, well, that's the way we've already done it and it's too late now—why didn't you bring it up earlier?

I'd also prefer to avoid the "what do you have to hide?" issue. Maybe someone, for whatever reason, does have something to hide; if they intentionally play chess anonymously, presumably they intend to do so. It shouldn't be up to me to decide whether or not their need, or even just desire, for privacy is legitimate.

(Of course, it's already too late—and has been since, at the very latest, the AOL incident—to worry about the onset of such de-anonymization, but it's always (or only almost always?) better to face inevitable future problems now, rather than waiting for that future.)
I would paraphrase your answer as: speed trumps complexity, and any programmer that gets caught out by the complexity is just a bad programmer.

Where speed is critical, other techniques are used to avoid processes. Often when using a separate process, the reason is for security and correctness. I do agree that performance does matter, for example in shell scripts.

Either way, your answer does not address the issues listed in the paper. Yeah, the paper probably has a Microsoft bias, but that doesn’t mean the identified issues should just be hand-waved away for performance reasons.
Google likes to (semi-legally) kill other people software they don't like, like they killed Gaia, the Open Source Google Earth client (which was, in many ways, technically superior to Google's, btw.)
https://stackoverflow.com/questions/7764943/what-can-be-done...
Text from the "10,000 Foot View" slide:

--

Verse is a functional logic language (like Curry or Mercury).

Verse is a declarative language: a variable names a single value, not a cell whose value changes over time.

Verse is lenient but not strict:

Like strict:, everything gets evaluated in the end

Like lazy: functions can be called before the argument has a value

Verse has an unusual static type system: types are firstclass values.

Verse has an effect system, rather than using monads.
Why Rails?
I only recently discovered Lex Fridman's podcast (2 monthes ago), but I've been obsessed! The Fiona Hill episode (#335) was great. The climate change discussion between Bjorn Lomborg and Andrew Revkin (#339) was very educational. Ray Kurzweil (#321) was awesome as well. I wonder how that guy (Lex) has time to work his real job since he seems to put out 2 episodes a week and they're all 2-4 hours in length and he clearly does his homework!
Question for ya if you don't mind: I had to do some PDF scraping a while back as part of a side project collecting alternative social/economic datasources.

Even within a single site, there were often errors at the fringes, especially if things like layout/styling changed, and my concern about giving bad data to users (or needing to constantly be checking data quality and adjusting custom parameters for each target site) held me back from ever feeling confident enough to convert it into a paid product.

I don't mean for you to give up your secret sauce here, but wondering if you ran into this same issue, and what your approach was from a business/customer expectations perspective?
I still haven’t recovered from when Microsoft changed Classic to Tiles. It was a shock to years of muscle memory. There were plenty of hacks to get the Classic UI emulated. Start > Programs you are dear to heart.
It’s not a google earth client. We have our own engine. We only use the directions/geocoding apis from google, but probably going to alternatives
I've quickly looked at a few but for admin applications, retool seems to be a good choice. I don't have a lot of insight into other tools.
> I can't wait for what v2 will bring

There is no such thing as V2
A few of the suggestions are about making new financial incentives. But the problem in the first place is the financial incentive structures! It's much better to let people do their jobs and not have a bunch of incentives. We know this is true for programmers, why do people expect it's not true about everyone else?
Finally, promises as defined in this specification can deliver multiple values when forced, an extension too natural to ignore

Oh yes, excellent, looking forward to playing around with multiple-value lazy streams (srfi-41).
In my area, if I were to spend $50k renovating my home, the value would increase by approximately $0.

If I were to spend $300k renovating my home, the value would increase by approximately $100k.

The only real increase in home value comes from additions which add bedrooms. If I were to spend money converting an attic, a basement, or adding an add-on, I'd probably come out even at the sale.

And renovations are quickly depreciating assets. I'm much better off doing that right before a sale. A new dishwasher will be an old dishwasher before too long.
Riding your bike to work (what OP is talking about) and not having a car to pick up your date (what TLC were singing about) are two pretty different things. Coworkers don't care how you get to work. Dates care bacause they don't want to have to take the bus home afterwards.
Playboy Launches OnlyFans Competitor
It's a sad day indeed when you pay for an OS that you then have to manually opt out of targeted ads and tracking.
There's a 20-20-20 rule where every 20 minutes look at something 20 feet away for 20 seconds. This helps to rest your eyes and reset from the strain of looking a fixed amount in front of your face for so many hours.
Tudor, but it is a different division of Rolex
However, I have learned over the years as a developer investigating update issues that the constraints placed upon the update process to ensure compatibility and resiliency are complex.

I have learned over the years that constraints and complexity are often abused to force one's way.

Not necessarily even consciously but if the collective train of thought in a company predominantly wants to prefer one outcome (i.e. market share, world domination) at the expense of another outcome (making users happy), then it tends to be that it's really easy to do things that result in the former and really complex and difficult to do things that result in the latter.
Thanks. I did lots of other things in parallel during the early years. I left my last consulting gig in 2014, so I have been doing in full-time since then.

Yeah, it takes a lot of perseverance to get a startup going. (Or rather, a lifestyle business in my case -- it's not a rocket ship, but I get to work on interesting things and interact with friendly customers, so it really is a great job.)
There is a lot of Linux distros out there too.

Trying Debian Stable versus a bleeding edge Arch Linux will likely give wildly varying degrees and complexity of 'issues'.
Fair point, but I think the UK’s “awful and overpriced” rail service would be an order of magnitude improvement for most places in the US.
How did this quack article make it on to the front page of HN? If you would like to educate yourself on the star/crescent symbol:

https://en.wikipedia.org/wiki/Star_and_crescent
What would you want them to do differently? They believe things have improved over time and want to share that information. I think it’s helpful but you seem to think it’s tiring or that they just shouldn’t?
Stolen money SBF sent to a political campaign isn't "your" money, unless you were a client he stole from.
Not really, unlike the other examples the words differ by more than just the vowel sound.
I often feel like we might have been better off as a society with the overbuilt products that could take more abuse and were more reusable and adaptable. Like a heavy phone you could dramatically hang up or beat a robber with, full of recyclable metal and reusable electronics.
> It also depends on "which part of NCC" you were looking at.

For the security consultancy part of NCC, it's not like I catalogue and re-check their findings so probably this is biased, but the only report I remember is the one from Keybase where they failed to notice that the claimed end to end encryption trusts the server to deliver the right keys. This was tested together with some other people on HN and packet capturing (one theory was that it checks the third-party websites like reddit/HN/... proofs, and that it's user error if you don't have any, but no, not even that).

I was really surprised by both Keybase getting something so fundamental wrong (they claim some blockchain magic verification which you can do on the command line, but the app doesn't have a blockchain client and no manual fallback either, so it's never verifying anything and instead fully trusts the centralized Keybase-operated proprietary servers) and by NCC not noticing this problem. Someone I knew from the security stackexchange site and whom I admire greatly took part in the audit, but of course they never replied (not even declining to comment) when I emailed them with a question about how this verification works (at that point, I still felt like I must be missing something so this email wasn't phrased accusatorily).

I don't have a bad impression of NCC in general and we all make mistakes, but yeah that's the example that stuck in my mind.
I always wondered about this!
If anyone wants me to build this, let me know! ZFS encryption these days is good for data privacy (i.e I wouldn't be able to see your data!)
Violent suppression of labor organizing is a prominent part of American history. Read, for instance, Rick Perlstein's "Before The Storm" about what happened at the Kohler factory in Sheboygan, more recently than the steel strike we're talking about here.
#1 https://massive.io while pricey per gb ($0.25/GB), you get the first 150GB free, so you'd be paying about $35 for the file transfer. Would be the least amount of effort of any of those scenarios, no real special tools required. Could even drag and drop the folder into the browser.

#2 would be portable hard drive. 300gb of video isn't enough to justify any syncing tools. Just drag and drop.

#3 rclone to Cloudflare R2 maybe, somewhere with no egress fees. Be about $5.
Yeah, I feel like some of these commenters have never worked a minumum wage job in their lives.
I have been a nerd all my life with long reading and computer hours. My eyesight has barely gotten worse.

Here are the things that I do:

- Blue light filter on all screens, whenever indoors. That's 100% of times on most days.

- Lowest possible viable brightness on all devices.

- Ambient lighting. An expensive RGB strip on the back of the monitor works. So does $4 table lamp from Amazon behind the monitor.

- ARC glasses/blue light cutting glasses on 24 hours.

- I take breaks often following a pomodoro cycle. And I go outside in those. I categorically avoid any kind of scrolling or checking on devices (after I read and followed Deep Work by Newport).

- I eat a lot of vegetables.

I got glasses in 2nd standard. And people who got glasses latter than me and many less nerdy than me have thicker glasses now.

I sit in front of a screen for 12-14 hours a day for years. I don't suffer from anything eye-related.
There was a lot of discussion discrediting art gallerys for banning AI content; seems a bit disingenuous to do it when it starts affecting our own content.