News for hackers. Stuff that matters.
Re:Request Node lib used by 48k modules is now deprecated by neurobashing on Tuesday February 18, 2020 @12:41PM (#22358057)
Hardly a hot take but a lot of people seem to think that if code isn't actively being worked it, you can't use it, as if there can never be a point where fewer and fewer bugs are reported and fewer and fewer features are requested.

when's the last time Knuth wrote a check for TAOCP? Is it "dead"?

Re:Request Node lib used by 48k modules is now deprecated by gaxun on Tuesday February 18, 2020 @01:44PM (#22358875)
> when's the last time Knuth wrote a check for TAOCP?

Pretty recently. I just got one in the mail today.

Re:Request Node lib used by 48k modules is now deprecated by kibwen on Tuesday February 18, 2020 @12:50PM (#22358183)
Heh, that's kind of a bad example, because Knuth is still actively writing TAOCP, and presumably does still send out his (now symbolic) reward checks. Volume 5 expected by 2025! https://www-cs-faculty.stanford.edu/~knuth/taocp.html
Re:Request Node lib used by 48k modules is now deprecated by JorgeGT on Tuesday February 18, 2020 @12:51PM (#22358202)
He is still working on it and the latest check I know about was from a few months ago: https://nickdrozd.github.io/2019/05/17/knuth-check.html but I still agree with your first sentence.
Re:Request Node lib used by 48k modules is now deprecated by svat on Tuesday February 18, 2020 @11:01PM (#22362946)
> when's the last time Knuth wrote a check for TAOCP?

Got one in the mail yesterday (check was written Feb 10). In fact you can figure out how many checks were written in the last month, roughly: compare https://web.archive.org/web/20200110074014/https://cs.stanfo... with https://web.archive.org/web/20200219035903/https://cs.stanfo... I imagine most of these checks (definitely all $7 of mine) were from finding bugs in pre-fascicles, i.e. bleeding-edge drafts he's been putting up online. (See near the bottom of https://cs.stanford.edu/~knuth/news.html)

On the other hand, while you mention Knuth and "done", TeX and METAFONT are better examples. He declared them "done" in 1990 (https://tug.org/TUGboat/Articles/tb11-4/tb30knut.pdf), but still does bug fixes:

> I still take full responsibility for the master sources of TeX, METAFONT, and Computer Modern. Therefore I periodically take a few days off from my current projects and look at all of the accumulated bug reports. This happened most recently in 1992, 1993, 1995, 1998, 2002, 2007, and 2013; following this pattern, I intend to check on purported bugs again in the years 2020, 2028, 2037, etc. The intervals between such maintenance periods are increasing, because the systems have been converging to an error-free state.

(The latest round, in 2013, did surface one bug: the debug string representation of an "empty" control sequence was missing a space.)

Re:Request Node lib used by 48k modules is now deprecated by gaxun on Tuesday February 18, 2020 @11:29PM (#22363041)
Nice to see multiple of us are on here.

> I imagine most of these checks (definitely all $7 of mine)

The 0x$2.00 check I got from 10 Feb 2020 was for one typographical item in Volume 4A and one pedagogical improvement in Volume 1, Fascicle 1. So it is certainly possible to still get checks for material that is already published.

Since it is now 2020, anyone with bug reports from the typography stuff should send them in soon, wouldn't want to miss the deadline.

Re:Request Node lib used by 48k modules is now deprecated by svat on Wednesday February 19, 2020 @08:14AM (#22365118)
That's interesting, can you go into more detail on those two -- what was the pedagogical improvement, and the typographical item? Just curious...
Re:Request Node lib used by 48k modules is now deprecated by gaxun on Wednesday February 19, 2020 @11:33AM (#22367070)
Sure.

- On page 715 of Volume 4A, he had something like \`a when he meant to have just à.

- In Volume 1, Fascicle 1, there is a convention that the "main" entry point of an MMIX program begins at LOC #100. The convention is established early on and repeated throughout the text. However, at no point is it explained why LOC #100 was chosen (instead of LOC #0, LOC #80, or whatever). It could be gleaned through careful study -- LOC #0-#80 are reserved for trip/trap handling and one more location before #100 is reserved for a special second entry point -- but you basically had to read the entire fascicle to find /all/ of these. A naive user would be likely to try writing a program beginning at LOC #0 and wonder why it didn't seem to behave correctly. My suggestion was to just add a note explaining why LOC #100 was used. He agreed and you can find the added note in the latest errata for Volume 1, Fascicle 1.

Re:Request Node lib used by 48k modules is now deprecated by svat on Wednesday February 19, 2020 @03:32PM (#22369753)
Oh thank you. I looked up page 715 of my copy of Volume 4A and can see the \`a. :-) I also see both corrections you mentioned in the online errata, that's cool. :-)
Re:Request Node lib used by 48k modules is now deprecated by fapjacks on Tuesday February 18, 2020 @01:21PM (#22358594)
He no longer writes checks to people for bug-hunting and hasn't done so for years due to concerns about the proliferation of his banking information. He mails out certificates.
Re:Request Node lib used by 48k modules is now deprecated by chrisseaton on Tuesday February 18, 2020 @01:24PM (#22358633)
Why do checks have your banking secrets on them?
Re:Request Node lib used by 48k modules is now deprecated by Izkata on Tuesday February 18, 2020 @01:47PM (#22358919)
...so that they can be used?

Those numbers across the bottom are your bank's routing number and your account number. I'm honestly surprised I don't hear more about e-check theft done using those numbers.

Re:Request Node lib used by 48k modules is now deprecated by chrisseaton on Tuesday February 18, 2020 @01:48PM (#22358936)
> Those numbers across the bottom are your bank's routing number and your account number.

Those aren't secrets, are they? Isn't your bank account protected by separate secrets and or physical authentication tokens? You can't just take money out at a bank by giving a bank account number, surely?

Re:Request Node lib used by 48k modules is now deprecated by jrockway on Tuesday February 18, 2020 @02:32PM (#22359466)
> You can't just take money out at a bank by giving a bank account number, surely?

That's exactly what a check is. It's a legal document that says "I give you X dollars from account Y." You can use a napkin instead of a the pre-filled sheets of paper your bank sends you, and it's still the same legal document.

Typically your signature is checked against one on file, but only for large transactions, and of course handwriting signatures can be forged. And, if you are writing checks against other people's bank account, you'll probably go to prison. That is the check on the system.

(It's no different than signing a contract. I'll do this work and you'll pay me when it's done. What happens if they don't pay you? You sue them. The root of trust is the judicial system.)

Re:Request Node lib used by 48k modules is now deprecated by chrisseaton on Tuesday February 18, 2020 @02:47PM (#22359612)
Right, but the bank is still entitled to check with me before handing over the cash. They have no way of knowing that I signed the contract. Account numbers and squinting at a signature isn't any kind of proof!
Re:Request Node lib used by 48k modules is now deprecated by SAI_Peregrinus on Tuesday February 18, 2020 @03:34PM (#22360097)
> the bank is still entitled to check with me before handing over the cash.

They're allowed to, but have no (legal or socially expected) requirement to do so. I've never heard of a bank doing so for small (<$10k or so) amounts, and then only if fraud alerts are already present.

Re:Request Node lib used by 48k modules is now deprecated by nailer on Tuesday February 18, 2020 @04:07PM (#22360422)
Is it possible to have an account in the US which forbids anyone paying from it using cheques?
Re:Request Node lib used by 48k modules is now deprecated by somehnguy on Tuesday February 18, 2020 @01:56PM (#22359028)
Those numbers are not secrets. They're literally just the bank's routing number and your account number. Using those numbers anyone can withdraw/deposit into that account. Madness isn't it?
Re:Request Node lib used by 48k modules is now deprecated by chrisseaton on Tuesday February 18, 2020 @02:21PM (#22359346)
My bank authenticates with me before honouring a check - is this not common?
Re:Request Node lib used by 48k modules is now deprecated by cmiles74 on Tuesday February 18, 2020 @03:01PM (#22359744)
I'm from the US and I've never heard of a bank verifying permission before releasing funds, they simply release the funds. As far as I know, US banks no longer check the signature (if they ever did) and no longer validate the date on the check (at least at my bank you can no longer post-date a check).

We recently lost a book of checks and the bank totally wigged out. They demanded that we close the account immediately and it took a decent amount of back and forth to talk them into waiting a week (we wanted existing checks to clear). To my mind, this implied that they did no validation on checks.

Re:Request Node lib used by 48k modules is now deprecated by somehnguy on Tuesday February 18, 2020 @03:23PM (#22359971)
I haven't actually used a check in a looong time so I don't know exactly what you mean.

I do know that I keep the numbers off a check from my checkbook I received when originally opening my bank account like 10 years ago in Lastpass. When sites that don't accept credit need payment information (my student loans mainly) I just copy/paste the numbers into their payment form and the money gets taken out of my account. No verification whatsoever, Nelnet is able to just withdraw the money from my account using those numbers.

I assume anybody with a debit processing backend or service can do the same if they have the routing/account #. It's kind of a wonder peoples money doesn't just disappear all the time really.

Re:Request Node lib used by 48k modules is now deprecated by no_protocol on Tuesday February 18, 2020 @01:55PM (#22359018)
If someone knows your account number, they can take money from it, there is no separate secret or anything. It would be illegal, but they can do it.
Re:Request Node lib used by 48k modules is now deprecated by chrisseaton on Tuesday February 18, 2020 @02:14PM (#22359241)
> If someone knows your account number, they can take money from it

You can seriously just say a bank account number at a bank in the US and walk away with a bag of cash from it, with no other security checks at all?

In the UK they’d make you enter a password or PIN or use 2FA.

Re:Request Node lib used by 48k modules is now deprecated by ixwt on Tuesday February 18, 2020 @02:33PM (#22359470)
No, you would have to do some authentication at a physical bank itself.

You can use the numbers to request a wire transfer from the account. In fact, when you're setting up an ACH transaction for bills and such, they tell you to get the numbers from a check.

Re:Request Node lib used by 48k modules is now deprecated by invisiblerobot on Tuesday February 18, 2020 @02:42PM (#22359572)
what??

You can deposit without a pin bit to withdraw you need photo id and a verbal password or pin in every bank I've ever been in

Re:Request Node lib used by 48k modules is now deprecated by SAI_Peregrinus on Tuesday February 18, 2020 @03:35PM (#22360111)
Are you in the USA? Our banks don't exactly do "security" at all.
Re:Request Node lib used by 48k modules is now deprecated by rafaelvasco on Tuesday February 18, 2020 @01:59PM (#22359067)
Check forging. Was a big problem years ago when checks were widely used; These days they're almost dead so; (See 'Catch me if you can' film if you didn't already!);
Re:Request Node lib used by 48k modules is now deprecated by chrisseaton on Tuesday February 18, 2020 @02:20PM (#22359330)
In the UK if I write a check my bank checks with me before honouring it. They don’t just let you wave a piece of paper with numbers on it and empty the account lol.
Re:Request Node lib used by 48k modules is now deprecated by robk on Tuesday February 18, 2020 @02:42PM (#22359575)
In the UK fraud barely gets noticed by police. In USA there's serious jail time for check fraud
Re:Request Node lib used by 48k modules is now deprecated by chrisseaton on Tuesday February 18, 2020 @02:54PM (#22359683)
> In USA there's serious jail time for check fraud

There's no serious jail time for it in the UK because the system doesn't let you do it in the first place!

Re:Request Node lib used by 48k modules is now deprecated by rafaelvasco on Tuesday February 18, 2020 @03:01PM (#22359749)
The superior system then;
Re:Request Node lib used by 48k modules is now deprecated by tonyedgecombe on Tuesday February 18, 2020 @02:56PM (#22359705)
Direct debits are surprisingly easy to set up in the uk.
Re:Request Node lib used by 48k modules is now deprecated by philwelch on Tuesday February 18, 2020 @12:53PM (#22358218)
The last fascicle of TAOCP was released last November.