skysight-inc/HackerNews huggingface dataset:
> You should be able to know all the references to a variable, if you are careful when writing your program.

The issue is: what if thread A and thread B hold a reference to the password variable? And you don't know in which order they will execute. In which thread do you scramble the password before releasing the variable reference?

From what I understand, OP's point is: because of the nature of C, you have to know where your variable is "free()ed", because you have to do it yourself. Therefore you can scramble there. Even if you have two thread doing:

n = decr_reference(password)
if (n == 0) {
scramble(password)
free(password)
}
It's also a chore when the ratio of work to value is high relative to other tasks. Unfortunately lot of tasks fall in to this category.
There are definitely mechanisms to do this in the JVM, such as the `finalize` method or in more recent versions, the `java.lang.ref.Cleaner` class.

However, using them correctly in the context of memory leakage and safety is non-intuitive and is definitely a bit tricky.
I personally would be in the target market, however I've typically rented AirBNB's in different countries and worked from there. So there would have to be some kind of upside over that for it to be worth it.

That said, biggest problem with "working from a different country" for me is self control. It's hard to actually be productive when the weather is beautiful, lots of interesting things are going on, and the beach is calling. Perhaps a co-working, or some kind of organized offsite with coworkers could change that.
This is great, except for the additional query each time a record is instantiated in the rails concern. That might cause some performance problems in high traffic.

Perhaps it’d be better to attempt the insertion and change the id only if there’s a colission detected with a uniqueness constraint
Maybe you're thinking of wet bulb temperature?
Crate training is pretty normal and not sure why you feel so weird about it. Is it “the way of the wild” to keep the dog in your house?
You can download his ancestor here:

https://winworldpc.com/product/dr-sbaitso/2x
For the benefit of Future Readers (most likely Future Me), I've tracked down the episode.

It was the 28 October 2019 CBC Ideas episode "What Psychiatrists Still Don't Know About Mental Illness", in which Anne Harrington discusses her book, Mind Fixers. The case of syphilitic psychosis, "general paralysis of the insane", is discussed in chapter 1.

Podcast: <https://www.cbc.ca/radio/ideas/what-psychiatrists-still-don-...>

Book: <https://bookshop.org/p/books/mind-fixers-psychiatry-s-troubl...> <https://libgen.rs/book/index.php?md5=A04307D5ABF5A467E9B1D1F...>

There are of course many other authors discussing syphilus and mental health, including Thomas Insell, Healing: Our Path from Mental Illness to Mental Health, discussed on the Ezra Klein podcast (and elsewhere).

Podcast/Transcript: <https://www.nytimes.com/2022/07/22/podcasts/transcript-ezra-...>

Book: <https://bookshop.org/p/books/healing-our-path-from-mental-il...>
Funnily enough, if you are using the clipboard to enter your passwords most of this is pretty moot.
I recently bought a Kindle to read Legend of Drizzt. The Kindle came with Kindle Unlimited at no cost, however, Kindle "Unlimited" is indeed very limited, as Amazon only includes certain titles with KU.

I bought a few of the books for $8/book, but since they can't be resold or donated, it seemed kinda dumb. So I found out that I can rent Kindle books with my local library card. In Indiana, a bunch of public libraries are in a digital consortium that shares access to books. So for the Drizzt series, there are usually 4-5 copies of each book that can be rented for 3 weeks. It's been pretty great so far, and much better than shelling out ~$300 to read the whole series of 38 books. I will not read this again, won't use them as reference material, so "buying"/licensing them for $8 each really didn't make sense. In fact, I deleted the few I did buy after I read them.
That's fair. Perhaps I should have chosen my words more carefully. What I was trying to say is that I've noticed that when dealing with very large and complex problems like privacy, climate change, terrorism, etc., people who claim, "I don't care about X, or I don't worry about Y anymore...", are often motivated first and foremost by fear. The problems get to feel so overwhelming that it becomes easier to either pretend the problem doesn't exist or convince yourself that you don't care.

To your broader point, you are correct. We do, and I'm guilty of it here, tend to use the specter of mental illness to silence or discredit people we disagree with.
We co-slept with both of ours as well. We still do with my youngest who’s just shy of two.

He’s having eczema problems currently. Having him in the same bed as us means I can notice if he’s scratching and intervene, otherwise he’d keep scratching until he’s bleeding.
Yes, but the concern is not a legal one, it is a practical one.

"You have been found in violation of our EULA and we have therefore permanently deleted your account. Please check our support page at <404> for more information." - Any Service, to Any User.

Now what, for Any User? Hope you're famous enough to raise a stink on Twitter to get your account back? Pay $1B in legal costs to sue them?
So, did you manage to "tackle" the people problem in the end? How did you get them to move and integrate with your system in the end? Was it a bottom up (from the end users) or top down (making it part if company strategy) approach?
Wandrer.earth founder here! Happy to help you get lost :)
> The modern suburbs in the US are soulless and boring.

I find this refrain tiresome. I grew up in a US suburb and had similar experiences to what you describe outside the US. I mean, yes, there are some suburbs in America that are husks of their former selves due to economics, etc. But I grew up in a small midwestern suburb of a failing city. I had the following:

1. Would regularly walk or ride my bike to the store with my friends to get things at the age of 7+.

2. A vibrant art scene.

3. A plethora of science and learning opportunities including a branch of a well-known University.

4. A walkable downtown with mom and pop stores.

5. 30 minutes from big events like concerts from our favorite rock bands. 60 minutes from famous sports franchises. 30 minutes from the symphony and art museums.

6. 5 minutes in the other direction was rural farmland where you could learn about agriculture, etc.
Depending on how you built it, could you migrate it to a platform like AWS or Azure where the IPs you use are mixed up with other services?
Show HN: Adapt or Die: Building AI Organisms That Learn (Game)
Hi guys, I've been experimenting with evolutionary mutations in this game I built. If you want to follow my thought process I made a video:
https://www.youtube.com/watch?v=NZtqoAKIKg8
Indeed I think BitWarden has the better UX
That... depends. If you are looking at a pretrained model that competes with ChatGPT out of the box, no.

GPT-NeoX apparently compares favorably with GPT-3 on some measures, but ChatGPT is a 175 billion parameter GPT-3 model, and the big pretrained GPT-NeoX model available is a 20 billion parameter model. Could you rival ChatGPT with the right settings and training set and sufficient hardware for training? Well, if you want to try, you can with GPT-NeoX, and you can chosr whether or how to filter the output. With OpenAI’s models, you get what they give you, on the terms they are willing you give you access to it, with filters that exist tonprotect OpenAI’s image and liability.
The issue is that even doing basic summaries of what is (actually) happening would require full time attention from a researcher 24/7 (so really 3 researchers, minimum).

Parents are sleep deprived, under incredible stress, and trying to avoid judgement from any number of other parties. Asking for survey responses ain't going to help, and even if they are trying to be fully transparent, they won't be able remember half of what is going on anyway.
Depends on the type and language. For example, in Java strings are immutable. Therefore you can’t really write over it.
I have.

Was not working for 3–6 months stretches throughout my life, recently 18 months.
Not our experience with co-sleeping at all: our sleep quality was terrible and the transition was extremely tough and prolonged. Congrats on getting lucky! :)
Pleasing Her Majesty Orally (2015)
At least an APK can be installed without the Play Store.

But yes, I believe Google's requirement is absurd.
BBC version of the Triffids is legendary in my book. Don't forget 1975 BBC show Survivors.
I think if you can afford to have these devices at home would be more interesting: which parts of the brain work when you use a functional programming language? Are these parts different in Haskell, ML, F#, or Lisp? And what about a complex templating in C++?
> some anti-inflammatory properties

https://www.ncbi.nlm.nih.gov/pmc/articles/PMC6214864/

Lots of literature 1 google/ddg search away for you, but there's an example.
Why not just accept SQL? It's a matter of contract. With REST APIs you specify a contract, it gets robust with time, and other software can expect only what's in the contract.
SQL allows you to run arbitrary functions over data in the database, so the whole schema and parts of the content in a way become your contract - and your options to modify the schema (or how you use the database) get very constrained.
This.
Both my kids were sleep trained but never involved leaving them to cry it out.

You let them cry for a min or two but no then you go in and soothe them.
Microsoft Excel World Championship 2022: Finals
Arc, the best browser to come out in the last decade. https://www.kdtechhub.cf
Not dismissing anything you said regarding 1PW but they also had cure53 audits. See e.g.

- https://cure53.de/pentest-report_1password-b5.pdf

- https://cure53.de/pentest-report_1password-mobile.pdf

Edit: overview of audits https://support.1password.com/security-assessments/
That's a new one for me, thanks!
Also how, say, firefox's password manager compares. I've tried to look up technical comparisons before but found them unconvincing (making clearly outdated or incorrect claims). You can get the standalone managers compared to each other, but the non-standalones are missing.
Wasn’t it a supply constrained market before? So now there is just a bit of slack but less than other markets they were previously less crazy.
In most GC languages, the String type itself is not a managed handle to a single memory buffer, but a reference into a whole copy-on-write datastore. So you can't even scramble the underlying memory - mutating the string to erase it will not zap the original, it will just create a copy.

Your best bet is to ensure no references to the password string exist - including in library code you may use, which means constant revalidations whenever you update a library or your underlying language runtime. Once you do that, you can force garbage collection, either by some explicit language mechanism to request garbage collection, or by trying to allocate gobs of memory in some way that can't be easily optimized out.
Exactly, this algorithm was first developed in the early 70's. I disagree that it is well-known, not in today's software development landscape.
In my particular situation it involved hours of group and face-to-face interactions. I am quite introverted so this proved to be exhausting and unsustainable. I imagine that it is possible to find programs that don't have this style of training but at the time I needed the money so returned to software engineering.
My current #1 wish for Excel formula entry: Please let me use [Tab] and [Enter] in the formula bar without trying to commit the change!

I like to format my formulas with multiple lines and indentation, but to do that I have to hold down [Alt] and mash the spacebar like a caveman.

I am happy with the new features I've been seeing. LAMBDA() and the new TEXT functions are nifty.
I'd bet that most people, in fact, would sit on the couch and do nothing if given the chance. Most people are lazy. Most people are fat. Most people will take the path of least resistance and just do nothing.

Medieval peasants didn't have television, internet and video games to isolate them. Humans are social creatures. As much as HN loves working remote, for most people, especially introverts, I'd wager it's terrible for their longterm health and mental state.
These kind of concerns are so funnily out of touch.

The real dangers always turns out to be crazily bad security practices (the kind obvious to everyone after the fact), not theoretical attacks that probably weren’t ever demonstrated in the wild.
No, I don't think this analogy is apt. It would be like someone thinking that preventing themselves from getting malaria isn't worth the effort so they go out and get infected on purpose. Maybe that's not cowardice but it's still incredibly stupid.

To reference the Snowden quote again, it would be like giving up your freedom of speech because it's too annoying to defend. That is cowardice.
Severals groups of boys at my grammar school† built what were called "User groups" which were "online" services accessible only on the school's computers with (at least theoretically) exclusive membership. There'd be maybe some simple games for your users, perhaps some sort of "bulletin board" and most often a "chat" service. Except, on the PCs we were increasingly using, these chat services all worked by using file I/O to a shared file, which is obviously very hard on the poor file server in ~1991 which is when this would have been happening. So the "chat services" were banned by staff. But I figured out how to write NetBIOS/NetBEUI software so I could implement chat without touching files, and this was allowed, increasing popularity of my User group, which I believe was named "Erewhon 2280".

† for Americans, the UK used to have selective education, some parts of the country still do, under this system children who test well at age 11 or 12 are sent to different state funded schools from their peers, mostly single sex such as a Grammar School, so that's a school of mostly high achieving all boys, this is probably a bad idea on net but it's popular for various reasons.
>I do not understand that part: how is Jellyfin serverless?

I read it as: (Could switch to things like jellyfin or enby) (Could not switch to serverless things like kodi, vlc, etc).
Theres different levels of crying, and its easy to tell the difference as a parent. Theres regular, all-purpose crying which I'm in favor of allowing to run its course. Then theres actual panicked, full-on crying which is when I would say its time to intervene.
Wouldn't the ISP just block that hostname, too?
The similarities in my experience between big tech (FAANG) and big non-tech are heavy process/communication burden, deep tech debt and perf review driven culture.

The main differences in tech are:

Engineers seen profit centers instead of cost centers, therefore treated/compensated as "talent"

Many (but probably not most) big techs are bottom up, much less common in non-tech

There is at least as big of a process and cultural difference between small startups and big co's.
Sounds great, but I hope they bring this feature to the local versions of Excel too. Using feature exclusivity to lure people into digital serfdom isn't cool.
I live about a block from Waugh Bridge (mentioned in the article). It is not unusual to have 10 or 15 neighborhood locals stationed at the bridge at dusk to see the bats as they leave for the evening. During the warmer months, when bayou insects are thriving, it's not unusual for me to see them flying around when taking the dogs for their evening walk. From what I understand, during our last freeze (the infamous freeze that knocked out the power grid here in Texas), there was almost a full colony collapse. Glad to hear that this time someone was thinking about them.
Good argument. Seems clear my thoughts was wrong.
> But further, a buffer overflow is practically impossible with a GCed language (especially a popular one)

Because the JVM had no buffer overflow? [1] Also I purposefully wrote "buffer overflow & co" because buffer overflow are not the only possibility. Shellcodes could ptrace() and inspect the memory of the program.

> > the last thread dying will release the memory for this variable.

> Really not how GCed languages work. Memory lifetime is not bound by thread lifetime except in the rare case when memory is bound to a thread (static/global variables).

That was bad phrasing from by part. You should have read "the last thread releasing the variable reference".

[1] https://www.cvedetails.com/vulnerability-list.php?vendor_id=...
>We additionally show that HCQ exerts dose-dependent effects on late long-term potentiation (LTP) and rescues impaired hippocampal synaptic plasticity prior to significant accumulation of amyloid plaques and neurodegeneration in APP/PS1 mice.

iirc (I am not qualified!!) Alzheimers relates to plaques in our brain, and this sounds to me like it fixes a precursor to the plaque accumulation (the loss of plasticity?)
Haha, well, this started as a project for my class about sustainability, so the game is meant to show how much the ocean is in danger, which is does by literally making it impossible to "win" by simply picking up trash. That's why some of the trash is impossibly fast.
the only bookmarks i actually revisit with regularity are webpages that have some kind of tool on them (e.g. a BPM counter, a javascript minifier, etc).

otherwise, the rest of my bookmarks end up being generated when i'm on some random site, see something interesting on the page, think wow this is really great let me bookmark it, press Ctrl+D, and then never go back to the site ever again. which isn't all that bad.. there's something nice about the feeling of just seeing all of the titles of those sites (and remembering when you found all of those URLs) when you click the bookmark menu, and all of the titles show up. it feels lived-in, like an old house with history.

at some point, i decided an even better way of capturing bookmark-able moments was instead to take screenshots of something specific on the page, and collect them somewhere else, like on a blog. i dont need to go back to the actual page via a bookmark, because the image is enough.

for example, here's where i collect curious and/or spam-like findings, in lieu of a bookmark: https://jollo.org/LNT/bb/effexor1for1dogs/
People have described the concern about memory not being zeroed in a predictable way, but not why that's a security concern. And, honestly, for most people I don't think it is. If an attacker is in a position to read arbitrary memory out of your browser then the chance that they won't obtain something else about as powerful as a password (eg, a valid session cookie) seems minimal. Or a crash dump file may include passwords, but then how does someone have access to that and not be able to read your cookie store? For a niche set of people I think there's greater concern around cold boot attacks - someone with physical possession of a suspended machine powers it off and quickly boots another OS, then dumps RAM (think laptop being taken away from you in an airport situation). That can be mitigated through firmware just wiping RAM on unclean boots (TCG has a spec for this, Linux and Windows implement it), and getting around that involves much more invasive attacks.

I don't want to say the concerns are entirely unwarranted, but I really don't think it's a big deal for the vast majority of people.
You can limit the visible schema, and thus the contract, per role with SQL.
TIL LastPass have been SOC2 and SOC3 certified for a few years. Huge facepalm
The problem with citing the Romanian orphanage is that it's too extreme to be in any way relevant to sleep training. There's a huge difference between gradual extinction (with parents coming back regularly in the room), with a loving relationship during the day and children in the Romanian orphanage who were left with no warm human contact whatsoever.
And there goes 99% of the potential customers.
> Asking for things you can look up how to do on the Internet just isn’t a good question

That is becoming less true by the day, as forums, blogs, etc., are filled with AI-generated pablum or with simply incorrect content. You still need an expert to tell you right from wrong, and the best option is to have a senior person in your team be that expert.
I worked in an office in the early 2000s that was PC’s but we had a single shared Mac workstation we’d use for tasks like testing things in Safari. I sat right next to this workstation and every time someone would sit there I would ssh in and use `say` to make it say strange things like “help, I’m stuck in the computer”. It was one of those green G3 towers and it would come kind of creepily out of it’s internal speaker.

No one knew who was doing it until one day my friend was using it and I made too much of an inside joke that gave it away.
It's very much in the lineage of Videodrome and Existenz.
I use a mix of pass(1) and LastPass, but this incident has convinced me to put everything on pass. But I don't really use it the "recommended" way, where you put the password on the first line. It's not a great fit for a consultant when half my customers want to give me my own Gmail/Atlassian/etc account. So I tend to keep big files of free-form text instead. But if I'm going to use it with a browser, the manual copy-paste will get annoying, and I want to switch to the normal pattern. Does anyone have any suggestions? I guess with decent auto-complete I can do something like `google/foo` and `google/bar`. If you have tips let me know!
My entire school district was in the same domain/workgroup and so I remember sending a net send to literally every computer on the network, 4 high schools (mine had a population of 4K students), 3 middle schools and a dozen elementary schools. The IT department came running into the computer lab to figure out who had done it. I simply closed the window, switched back to MS Word and played dumb. Good times.

A few months later I got expelled for some Novell netware breakin shenanigans but that whole experience was well worth it. I had been booting into slax and stealing SAM files from shared/library computers and then cracking them at home with lophtcrack to figure out passwords. The top level system admin had a 5 letter dictionary word, “north” as his password. I had keys to the kingdom. I’d shut systems down all the time for fun but never broke a thing. They tried to throw the book at me but fortunately it all fizzled out in the end.
Up top I want to be clear: I totally agree that software is really, really close to actual magic.

I think comments like this are less about the reality of the situation and more about a bad vibe about the industry, and venting. I think we’ve all been in a situation where “doing a good job” meant moving a little faster than we think is appropriate.

These pressures add up, and I don’t think it’s totally unreasonable that some folks who witness things too far on that end of the spectrum might scream out into the void.

I don’t think it generally comes from a place of disrespect. In fact I feel like it comes from a place of feeling like doing good work is important. If i get it in person though, it does generally come from folks who think they’re better than me, which I agree is disrespectful.
Nothing interesting but:

Work:

- QGIS for its accessibility, print layout, and plugin ecosystem

- Notepad++ & DBeaver for being reliable daily tools at work

- The VS Code Jupyter notebook plugin

Grad school:

- Typora for simplicity and elegant note-taking in markup, though I've only been on the trail version.

- SumatraPDF for lightweight book reading on the computer (I read ~30 books this way this year)

Honorable Mention:

- This tiny, ad free solitaire app that hasn't been updated in 2 years. My go-to for planes and waiting rooms. [0]

[0] https://apps.apple.com/us/app/classic-solitaire-klondike/id1...