skysight-inc/HackerNews huggingface dataset:
> Yes it does. Your point about signal handlers is why I'm right

If it's not a single disk system, not necessarily. To give you a concrete example: a process that writes logs to a disk dedicated for log collection can simply ignore an EIO/ENOSPC if logging isn't its main task. It can't easily recover from a SIGBUS in that scenario though.

> If you've hit EMFILE, you absolutely have some FD which you can sacrifice to collect debug info, is my point. If you don't you can reserve one a priori, this isn't that hard to deal with.

I'm not sure why you keep sticking to this example, when I already said that it was just an example of another detail that you need to take into account when implementing a SIGBUS handler. Sure, you can open /proc/self/maps a-priori and side-step the issue, but that's another detail that you need to take into account (and that you didn't mention until I brought it up). I never said that it was hard, only that writing a proper handler that deals with the edge cases isn't as trivial as you claim.

> you've invented an ambiguity that does not exist [...] you'll see that all the non-I/O cases you mention are independently identifiable via members of the siginfo_t struct

I'm not sure what's the ambiguity that you're claiming that I've invented. Yes, some of the specific examples that I gave (specifically CPU exceptions) are identifiable if you already know the details, but not all of them: non-disk faults can still result in SIGBUS with BUS_ADRERR, so that alone isn't enough to identify EIO errors or EOF coming from memory-mapped files, and I know that from personal experience debugging SIGBUS crashes.

> you're spewing unfounded FUD about the mmap() interface

I don't know where this is coming from. I never said that using mmap is bad or that it's impossible to write a SIGBUS handler to output debug info before crashing. I merely pointed out that it's not necessarily trivial, as there are details that should be taken care of, and that it may not in fact be suitable for 95% of usecases as you claimed.

You have a mental model of an ideal system which either can't recover from I/O errors, or doesn't get SIGBUS for reasons other than EIO or reading beyond EOF. I'm trying to tell you that not every system is like that, and that while mmap is useful, there are cases where explicit I/O is better suited for the task, and that your 95% might not be everyone's 95%. If you see FUD in simple facts, then I'm sorry, but I see no point in continuing this discussion.
Yes. I personally use Ctrl-Cmd with the numpad. 8 for top half of screen, 9 for upper right corner, 6 for right half, etc. 5 is full screen and 0 moves window to next monitor. I’ve been using it for more than 10 years now. It is easy to customize.
Not really no.

> To protect the data that is not covered by end-to-end encryption, Telegram uses a distributed infrastructure. Cloud chat data is stored in multiple data centers around the globe that are controlled by different legal entities spread across different jurisdictions. The relevant decryption keys are split into parts and are never kept in the same place as the data they protect. As a result, several court orders from different jurisdictions are required to force us to give up any data.

> Thanks to this structure, we can ensure that no single government or block of like-minded countries can intrude on people's privacy and freedom of expression. Telegram can be forced to give up data only if an issue is grave and universal enough to pass the scrutiny of several different legal systems around the world.

https://telegram.org/faq#q-do-you-process-data-requests
"Storage isn't cheap" "check the [Apple product] upgrade prices"

Under this logic, RAM is still $100 / 8GB, a factor of ~4x greater than non-Apple prices. A similar coefficient is true for their SSD storage pricing.

Source: Mac Pro configuration page
https://www.apple.com/shop/buy-mac/mac-pro/tower
These types of utilities have been popular since the classic MacOS days.

A few I paid for:

* BetterTouchTool

* Bartender

* Choosy

* MacWhisper

* Mona

* BBEdit

* Retrobatch

* AirBuddy
This is the same French secret service that bungled the sinking of the Rainbow Warrior ?
> Bob admins the DC from a workstation. If that workstation is not protected as much as the domain controller, the DC can be compromised.

They both run Windows. The protection class between the two is identical. You can draw as many graphs and lists as you want, but the security of this arrangement is mostly down to timely and accurate Windows Updates.

> Learn to Spot List Thinking

I think in terms of "diffs." I want to know what is _changing_ on my network. I don't ever need an enumeration of things in any particular arrangement and as a human being, whether graph or list, I'm not equipped to use it in any meaningful way.

A difference list is typically very short, reveals intrusion patterns quickly, and is something you can automate easily.
> Yes, it is. Obviously!

> I'm sorry, but what else are defenders trying to do that isn't defense? are all defenders completely incompetent then?

You've misunderstood me. Defenders aren't the "cyber security team employed by AT&T to keep customer data secure". The Defenders are AT&T, who would rather spend their cyber security budget on just about anything else that could actually generate a profit. The cyber security team that AT&T hires might have the sole job of building the most robust defense system imagined, but even if they do, their efforts will be continuously stymied and reduced because true, complete, robust security will get in the way of actually doing the things the AT&T wants to do.

Or to put another way, a company that spends all their money on perfect cyber security is as useful as the proverbial perfectly secure computer encased in concrete and buried a mile underground with no power or network connections.
There are windows licenses?!!
Thanks for sharing! Seeing someone building something similar and being successful is incredibly energizing. I had doubts that it would be something folks would actually be interested in using.
Prerequisite is a euphemism for practice. You lack practice.

It’s like saying you can improve your skills in basketball/swimming/piano/singing if you just practice better.

But obviously you can still be dumb and know a lot of math.
A Jenkins replacement in Python (I hate Jenkins with the fire of a thousand suns, and it will never die as long as nothing appears to take its place). I've dropped it for the moment while I'm building a custom truck camper (which will also go on GitHub once my FreeCAD plans are done)
Making android based TV consoles to play top Android games using key mapper mapping from touch to gamepad.
This is one of those “your scientists were preoccupied with whether they could, they didn’t stop to think whether they should” type projects.

This is something you add to a project to obscure some sploit.
> is very different from “there is a proof over there so I will accept it as true and you should too” (i.e., how citations tend to be used most of the time, unfortunately).

I have seen exactly this. A (famous) professor at my university had a manuscript for a textbook that he had been working on for years, but had not yet published. A number of people wrote papers citing the (unpublished) book.

Of course, this is a bit of an outlier as the author had over the years given people drafts of his book.

Still, I would say that as long as the referee can access the web site and verify it, it should be allowed (and I'll still assert that it has been allowed on numerous occasions). May vary with discipline, though.
> That's why he's being accused in France...

Or it could be that he has French citizenship; subject to French law. Spreading your infrastructure across legal jurisdiction doesn't make you stateless - it just ensures you're subject to the laws of each jurisdiction you operate in.
> This makes them liable when they refuse governments' requests for such information

If all the chats are e2e encrypted then the government will arrest you for designing chats in such a way that a backdoor is impossible

Like we say in Russia, "as long as we have a man we can find a law to imprison him"
Reddit? More like Deddit...
Won’t stop LLMs
Interactive Fiction authoring platform (sharpee) built in C# 8 and mostly coded iteratively using Claude Sonnet 3.5.

V.01 close to ready.
Why can't I hear my party chat during stream?
Hey! I just recently started streaming and I'm trying to figure out why my party audio (both game chat and private party chat) does not show up on my Twitch streams. I recently was watching one of my previously recorded streams and at one part the xbox controller fell out of my hands, my headphones were then unplugged from the audio jack and on stream I was able to hear one of my teammates in the party talk but as soon as I put the headphones back in, the chat audio disappeared again.

I use the Turtle Beaches Wired Recon 50x Headphones connected to my Xbox S controller. I use an El Gato CC & stream through OBS or even directly from my Xbox sometimes.

I've pretty much checked the settings so far like most people tell me to and everything seems to be correct. Can someone help with any specifics on what to do or try next so I can finally stream with my friends voices being heard and not just only me talking on stream?

pwease and thank you!
Ask HN: Do you consider coding "work"?
For context, I've been struggling with work/life balance.

One thing I've realised is that I've never really viewed coding as work, even though I do it for a living (including in my spare time). I think instead I've always viewed it as a hobby, and I've therefore never really had this sense that it's something I could do too much of.

In retrospect, I've come to realise that although I enjoy coding and treat it as a hobby, it is ultimately "work" in the sense that I've been burning out from it.

I think then realised that not all hobbies are equal and that some are equivalent to work, whilst others aren't.

For example, video games I feel aren't work. Whereas something like coding or doing house repairs is, simply due to the effort involved - irrespective of whether you enjoy it or not. I think another example is art, but when you're studying it to get good at it - that also to me is work, due to the nature of studying.

Do you consider coding "work"?
why are they calling it an os then? cosplaying arnold kling?
Same here. I first saw it on television more than fifty years ago, and I still go back to it every few years. It has at least one major flaw—the letters of transit being so important even to the Nazis—and some minor ones—the absurdly well-dressed refugees, continuity issues with props appearing and disappearing—but the story, script, and sentimentality all redeem it for me.
That's because they are different, police can come with a warrant to check your house for illegal activity but they can't monitor you remotely 24/7 with barely any human intervention and store everything you do indefinitely. With electronic communication you either get full privacy or none.

And no, putting company's in charge of your privacy isn't a solution, if they can be compelled to give away your communication history then they'll abuse it. Have you not learned anything from the Snowden leaks?
I'm writing a programming language. https://github.com/coreyp1/CTang (probably will be moved eventually).

It's meant to be a scripting language to be embedded in another program, generating HTML. Eventually I hope to make a CMS and this be my solution for easy templating.

Technical details: Written in C, the language has an x86_64 JIT compiler, but falls back to a bytecode VM so it should work on any architecture. The language itself is dynamically typed and garbage collected. Currently at 20K LOC (not counting blank lines or comments), with good test coverage and checking for memory leaks. It's been quite enjoyable!
how can a LLM judge what can be trusted or not?
I am still working on https://textsniper.app
Yes, under this logic you can't ignore the reality of a large % of users when making sweeping claims about the reality of all users.

Also don't forget the fact that many devices can't be storage-upgraded, so this pushes the actual cost of extra storage even higher
Nice writeup! One limitation to this approach is that the fault injections happen at the dynamic linkage to libc layer, meaning that an enterprising student who either statically links their binary or invokes syscalls directly will circumvent the interposed functions. But in a teaching setting I could imagine this isn’t a practical concern :-)

(I built a similar tool[1] a few years ago, but at the syscall layer to ensure that statically linked binaries could also have faults injected into them reliably. My colleagues used it to find a handful of bugs on prominent Go codebases.)

[1]: https://blog.trailofbits.com/2019/01/17/how-to-write-a-rootk...
I left Russia and moved to Florida. These were the 5 biggest culture shocks
damn, that's a good comment you linked
I think it's time for anonymously hosted .onion and .i2p git repositories, ideally with IPFS and Hyphanet backup in the event the black helicopters find the hosting systems.
The 'thing', be it a game engine or whatever else, of choice for small projects often end up taking over for commercial products too, devs bring their favourite tools into their work and slowly corporate adoption of it grows.
It happened with Slack, it's very quickly happening with Blender, hell it even happened with Unity itself
I'm not sure I'd be as optimistic as OP in terms of how quickly Godot will take over Unity, but I do believe it will happen, or at least something similar
When was flat earth only a gag?

People were adamantly trying to prove a flat earth at least 150 years ago, and even got the co-discoverer of evolution via natural selection(Wallace) roped into the controversy: https://en.m.wikipedia.org/wiki/Bedford_Level_experiment
Im upgrading avx2 to avx512 (where possible) in my reimplementation of RandomX algorithm: https://github.com/patrulek/modernRX
The missing 5% was stolen by copper thieves.
Cyber attacks are in the same position as sales in most orgs: they can focus on getting other people's money and some failure rate is acceptable as they don't get paid much if they don't succeed.

The org can invest as much as they bring in, they're a profit center, where defense is always a cost center that will be reduced to the minimum acceptable.
I did have friends lol. I was just a bit of an outsider from then through the end of high school. I didn’t correct it until midway through uni and I think I missed out on a lot
I've generated mazes for the cover of my poetry book

https://www.amazon.com/Olavsweg-Gedichte-Gedanken-lyrische-I...
I'm building an open source implementation of the Firebase RTDB server, that will be wire-compatible with Google's. This means that all the (already open sourced) SDKs will work pretty much as is, over REST or websockets. Security rules will also be fully supported. (The only meaningful caveat is that it's just the RTDB, so you need to deal with authentication yourself, and kinda shoehorn it into the existing APIs.)
Yeah but that's a lot of individual purchases I have to maintain and regularly rebalance. The fees alone would destroy it.

I want "buy all S&P stocks minus Boeing" to be as easy and cheap as "buy Boeing".
Ideally, cash with no INSERT IDENTIFICATION so there's no flow of value to audit. ATMs are out!
There US Army generally has one tourniquet that it’s deemed best. The CAT by North American rescue. Every Soldier is awash in these things. They hand them out like candy on Halloween. And rightly so.

But the Government has to buy them from businesses that meet certain characteristics. Woman owned, etc. That’s a great thing, right?

In this case however, that female owned business is the guy who invented the things wife. Who he sells them to at a mark-up. Who then sells them to the government.

Economy of scale? Ya! They are the number one buyer and pay the most. Honestly, who cares though, it’s only a couple million a year. Drop in the bucket.

How did Boeing fail? Death by a thousand cuts. That same story probably plays out across the entire supppy chain. Every part, every product, every supplier. Compounded over and over again.
The environment of a school is much more rigid and authoritarian than many workplaces (e.g. everyone must use this exact thing in this exact way all together right now), and students don't usually have much choice in their school. The tools are often taxpayer funded as well. Not to mention the fact that those affected by ed-tech are often minors. So I think it's reasonable for there to be some extra scrutiny surrounding a lot of ed-tech.
Haskell in binary code, but by toggling those switches on the front panel of the machine.
Which one(s) are you thinking of? The JVM's appear to be in C++, GHC's and SBCL's are in C, Go's is in Go, and I'm not familiar with other high-performance garbage-collected platforms.
Sounds excellent, joined the wait list.
Yes, my bad. Thanks.
do you know why vendors take credit cards, square and applepay, even though those services charge several percent fees? part of it is for convenience for the customer, but another part is that shuttling cash around to the bank and back is time consuming, risky, and takes you away from running your business (let's say you are a breakfast place, you don't make your own cups and napkins or farm your own eggs and coffee either)

>product is money so you'd only stand to make a profit never a loss

you're grabbing the expense part of the business that everybody else is trying to shed. Let's talk also about time value of money. All the money that you've invested in cash is not making money passively as other investments do. Compared to putting the money in the stock market, you're losing 7% a year on this scheme, plus the expenses of running your business, and opportunity cost of not doing something else that generates income.
Even if they put it near the top, it's still going to be reduced in effectiveness by the actual needs and goals of the organization. Any company that has a VPN and remote employees is objectively and inherently weaker from a cyber security standpoint than an otherwise equally equipped company with no external access to the network. But they do that because remote employee access means they can do their actual business better. Any company that uses networked computers in objectively and inherently weaker from a cyber security standpoint than one which requires physically moving data from one machine to another by way of personal handoffs between employees at the same physical location, but they do that because it means they can do their actual business better.

It does not matter if cyber security is at the top or the bottom of your budget list, if the choice is ever "better cyber security" or "do more business", cyber security is always going to lose that battle. You will never convince a company to use E2E encrypted email for all communications with all customers and vendors, no matter how high on the budget list cyber security is, because doing so would actively hinder the day to day operations of the business.
Gem still exists as FreeGem: https://www.owenrudge.net/GEM/dist
If Apple did that, people like me would accuse them of EEE.

We don’t trust proprietary stuff because we’ve been burned by it, if there’s an open standard, even a worse one: use it.

If it’s really that bad, we need to improve the standard.
Not being a behemot is not an excuse if they are not moderating criminal behavior at all. I dont know if that is the case, just pointing that logic is not sound.
Figuring out how to add game boxart and screenshots to my recently-relaunched MIDI and chiptune player: https://pixeltune.org/

It's a fun challenge, because I need to figure out how to reliably determine the matching game for files like /pub/johnny/midi/games/sc2kmenu.mid, and also to show them in a way that fits nicely in the UI.
Its fairly common to refer to Linux distros as an OS, or even include OS in the distro name (Pop!_OS, NixOS, CentOS). Linux is the kernel, and disros add stuff to make a functional operating system.
Spirited Away, High Fidelity, Kung Fu Panda, blade Runner (the Final Cut), guardians of the galaxy, stalker, Amelie, 99f
https://blog.dijit.sh/i-don-t-trust-signal/

tl;dr: Lots of claims, lots of support.. but very little to back it up once you scratch the surface.
A no-code tool to create/maintain visual end-to-end UI tests.
I think it's harder for you to write "correct code" here because the crate is hiding most of the actual detail from you. I put that in quotes because there's absolutely nothing incorrect about the code, it's really just suboptimal, and most probably because it can't even use the full syscall interface.

Seriously, I hate to be a curmudgeon, but that crate looks like a particularly bad and naive wrapper around mmap. It works very hard to provide you things you don't need when the basic interface is much more flexible. Aside from having to put `unsafe` around the call and re-import the kernel header constants, there's almost no reason to even have this in a crate.
Hitchhikers!
Look at the Horizon postal scandal and how long it took to hold anyone responsible.
I remember reading strategy guides back in the day that said to make your city one long serpentine road so you didn't have to deal with the random turn mechanic at intersections. I never played that way though and it was still a lot of fun.
My local school district has fewer than 48,000 students, and an annual operating budget of $1.2bn.

This money is used to pay for 13,500 adults (government employees).

Their total compensation is higher than you'd think. You can look it up on the Transparent California web site.

Paying those people seems to be a higher priority than children or learning outcomes.

The problem is not a lack of expenditure.
Never take health tips from pill pushers. The medical business is a business is a business! Doctors being the most notorious pill pushers on this planet.

Diet, exercise and good sleep, keys to longevity.

Popping pills key to early death.

Authority figure mad about someone ignoring their authority, is so old, it's stuff for fairy tales.
>Good refactoring respects the idioms of the language and the culture of the organisation. Change to new methodology is thoughtful and probably slow, except when a revolution happens but then, its still respectful to the new culture.

Burkean programming lol
Similar performance to Nvidia 1080 dedicated GPU.

Would I get it? Absolutely yes. A full desktop small form factor is a very convenient, nice thing.
What's the source of this data? Who composed this graph? Why does it begin in 2022? What do you hope we take away from an isolated graph?
> Telegram encryption is off by default

This is false. Telegram's non-secret chats use MTProto 2.0 Cloud. "Encryption is off by default" is a false claim.

1. https://telegram.org/faq#q-do-you-process-data-requests

2. https://core.telegram.org/mtproto/description
Read about Bhopal tragedy, it is pretty much same.
Neither of those are databases. Django is a Python webapp framework and SQL Alchemy is an ORM.
It would be an input to a relay protection system which is technically software controlled most of the time but quite secure.