skysight-inc/HackerNews huggingface dataset:
> OK, it's a systems language, but what does that even mean? You can write a system in any language right?

When people refer to systems languages, they usually refer to languages that need to do lower-level interactions with hardware. For example, calling to your graphics card manually rather than using a high-level GUI toolkit. Or mmap'ing memory, or using internal JITs. This means that you need clear C and assembly interoperability and generally want to avoid garbage collection.
Sgt Pepper: an unreleased outtake of the Beatles' classic
I'm a book aficionado. I just love books. Our house is filled with thousands and thousands of books. And I have a Kindle. 2 Main reasons:
(1) Travel. Going on a trip used to involve careful selection and (for longer trips) substantial packing weight and volume (I travel light), now I just take the Kindle, and don't even have to buy the books i want to read in advance
(2) Pint quality. I read lots of paperbacks, and frankly, the print quality on some of them has become so atrocious that it is almost impossible to enjoy the read. Blurred tiny prints on flimsy but coarse grained paper are no exception.

Still love the physicality of books, but i succumbed to the practicality of the e-reader
> The increase in attack surface is that you weren't running GPGPU apps with potential access to the browser framebuffer before.

If I'm on desktop, I'm literally running apps that don't have to read the browser framebuffer: they can just ptrace() the browser and pull its memory out.

If I'm on mobile, then apps can't ptrace one another, but they do have full access to the GPU already, including GPGPU. For example, Apple's Metal has compute functionality.

Can you describe the specific attack scenario you had in mind?
Me too! It look's really pretty at sunset.
How is a query going to be faster on a GPU, when a query just performs lookups in tables, and simple comparison operations. You'd have to get the data via the CPU to the GPU in the first place, so you might as well perform the lookup/comparison on the CPU instead.

Unless of course you plan to load the complete database in GPU memory, which makes the whole approach unsuited for large databases.
What's pure data in this analogy? https://puredata.info/ A hex editor?
Yes, I was wondering the same. What were Edward Teller's secrets?

This reminds me to finally finish reading "Dark Sun" by Richard Rhodes.

I think "The Making of the Atomic Bomb" was one of the best non-fiction books I have ever read.
Maybe it's not such a dumb image meme then, eh?
Is it normal for these proposals to read like a plagiarized high school report?

They repeat "open internet" 43 times (disregarding the fact that the proposal is for quite the opposite) and copy-paste whole sections around the document, over and over again.
A shame everyone is downvoting this comment. But you are honest then your first comment deserves as many downvotes as possible.

Since you are in charge of this new language I won't be using it. The Rust community has largely figured out how to get work done with minimal malice and a language that actually exists.
One-off text filtering in BBEdit
Been doing the same thing: Sanic is great!
Putin, in case anyone had trouble with the article's implied message.
You never need to release now.

Well, unless you made a huge regression that's killing your users... which ironically is a recurring issue alleviated by releasing slower and testing better, not by releasing faster :D
That's actually a call to a rickroll.
Call Ajit Pai 888-534-6762 and tell him why net neutrality is important to you
United Passenger Dragged Off Plane Settles with Airline
Cool project.

Dropbox Paper recently added a similar feature called Presentation mode. It treats --- as slide breaks and intelligently does font sizing of headers, recognizes headers as "soft slides", etc. It takes very little to no effort to go from doc to minimal presentation.

https://www.dropbox.com/help/paper/presentation-mode
Ahh, gotcha. That makes sense, this setup makes a lot more sense if you're dealing with very spikey reads.
ok. my email is <username>@GMAIL
Spring for Apache Kafka 2.0.M1 Improves Threading, Listener SendTo, ErrorHandler
Specifics aside, this may just be more Cold War. In a new realm, for sure, and one where Russia isn't as disadvantaged by resource limitations. Trying to match US physical resources arguably destroyed the Soviet Union.

But I also wonder whether the US got too careless about hiring blackhat hackers. And whether some of them left backdoors.
> It may be safer, but not as "ergonomic" subjectively, which ultimately affects productivity.

For my first large project in Rust, I ran into several issues where the type system was complaining that I couldn't take the references of certain variables in certain ways. Most of the time, it was clear to me (eventually) that what I wanted to do was actually unsafe. It takes some time, but a lot of the pain involved with starting out with Rust is realizing that the patterns you've been using all along in C/C++ were fundamentally unsafe from the beginning.

The rest of the time, though, what I wanted to do was safe, but I couldn't figure out how to structure the code to get Rust in a position where it could guarantee that safety.
Why do you need articles like this? Why is WP not secure by default?
>> "but Musk seems less concerned with the share price of Tesla than some people find to be acceptable."

That's precisely my point. The stock price is a moving average of people's guesses and hopes about Tesla's performance. Very few of these people actually have a window into what's in Elon's mind. To that extent, the stock price is more a metric of the 'ignorance of the commons', rather than their wisdom.

Elon absolutely should not be focusing on micro-optimizing Tesla stock.
Have you looked at Tucson? Similar to Austin, it's a liberal artsy city surrounded by reds, and yes the AZ legislature has done some AWFUL things, but Tucsonans are passionate about protecting people and it's one of my favorite places on Earth. Grew up there and since I left, the diversity has been growing since Tucson takes in a ton of refugees from all over the world. It's a sweet little bubble, beers are $1.50, food is amazing, and the people are sweet. Nothing like sitting outside at 11pm in sandals, shorts, and a tank top.
https://github.com/paxos-bankchain/pastey/blob/master/app.py...

:)
While IDE transforms can be handy when getting started with small projects, you cannot use them for automated builds (projects with multiple contributors, continuous integration). Any serious project using TS does indeed require a build step.
Funny you mention the RAM clearing -- a buddy in HS and I wrote a program to simulate the ram clearing screen so that we could keep using our programs and not lose them. Then the teachers caught on and then instituted a policy that they would use the calculator to make sure it had cleared.

Well, just meant we had to make a 2.0 version that allowed you to do operations on the calculator within the app. That one we didn't distribute to friends, but just kept for ourselves.

Man, those were the days...
It's not a "language", it's a few words.
By "open internet" they mean, "open to becoming monopolized" or "open to the highest bidder".
>Why would Russia (or any state actor) wikileak these compromises instead of using them against unpatched targets globally? No upside & makes no sense.

Huge flaw in this reasoning- the fuzzbunch stuff was patched before it was leaked. Russia leaking recently-burned tools makes a lot of sense.
We've been seeing more Datalog-inspired DSL's around here, and that's a good thing. Fathom surely has uses beyond those the OP mentioned.

But as for those use cases... well, it just makes me sad. Obviously people have perverse incentives to make the kind of noise that Mozilla is bemoaning, and those people will find a way to game any system --- especially a highly readable one!
Use the comment syntax for type annotations. They are compatible with both versions.
In my language, it will be possible to express an impossible number of downvotes, correcting what is perhaps the most glaring design flaw of Arc.
"I'd fap to that." - Abraham Lincoln
Ask HN: Does a IRC or equivalent chat exist for HNers?
Ask HN: Does a IRC or equivalent chat exist for HNers? - https://news.ycombinator.com/item?id=14208455
Startups with lower salary ranges (SF)
I saw a job post go up today for a startup (~25 employees) in SF who's in the esports ecosystem, something I'm excited about. Their salary range for a Senior Full Stack Dev was 90k-120k and 0.075%- 0.5% equity. From an outside perspective, this looks pretty good still even though I know that most other places in SF pay more. Have you ever worked at a company like this? What was your experience?
It still flushes the db first?
You are generalizing much and citing no sources. You claim these are unsuitable in every case. Please provide concrete examples, links to benchmarks and other reasons to believe what you say.

I ask because you appear very biased and you experience contradicts mine, you could be right though. If you are right I would want to know, because I might make mistakes if you don't correct me in an objective way.
> Turnover at an acquired company isn't unusual, nor is friction in the transition.

Things are a bit different in Germany than in the USA when it comes to this.
A little too close to home!
- Allowing an unprivileged/sandboxed/jailed process to sniff internal state/framebuffer of a privileged process.

- Allowing one user to sniff internal state/framebuffer of another running on the same host/VM.

- If full write access to one of the global/shared memory spaces of a live process can be obtained, potentially breaking VM sandboxing or jumping privilege followed by buffer overflow or other exploits.

I'm not sure why you think the existence of other attack surfaces matters at all. If you get right down to it X11 doesn't respect any boundaries at all and you can just sniff or keylog anything you want.

That's still not a good reason to throw up your hands and declare you're not going to have any security at all.

This is a relatively general problem with letting untrusted applications run GPGPU acceleration, and there are some relatively simple mitigatinos.

What exactly is your beef with zeroing memory before you reallocate it to another application? Or are you just being pedantic?
Not just Russian—all Slavic languages I'm aware of have this concept. There's also the opposite, an augmentative, which is a modified version of a noun that conveys stronger intensity.
One of nVidia's cool hacks was to record front-left and front-right views as well as straight ahead. Then label them with counter steering actions so their dataset includes trajectories that quickly compensate when the car veers off course.
Hence the ouch.
I'm curious, what do you believe is the minimum level of help a company must provide its suppliers in order to turn a competitor buying them out into despicable business behavior? Is simply being a long-standing customer enough? How long is a supplier that is provided help ethically required to continue supplying?
All mammals poop in 12 seconds and there's an equation
Definitely don't disagree with you there. These are all plausible. I think a lot of AIs choices concerning us would come down to whether they actually would care for us at all.
Please don't. The transpiler route ended very badly for JS. Let's not open this pandora box for Python.
Rust's goal is to make it easier to write fast, reliable software.

It's not just targeted at C/C++ folks. The Rust team often hears from people who have been pulling their hair out trying to get a particular component written in a scripting language (Ruby, Python, JS) to go fast enough, which entails getting very intimate with the runtime systems for those languages. They're often surprised that they can instead write that core component in Rust, without giving up any developer productivity (or sometimes gaining it, compared to hand-optimizing their code), and get something much faster than what they were able to achieve in a scripting language.

There was a post just the other day on the Rust reddit telling this story: https://www.reddit.com/r/rust/comments/67m4eh/rust_day_two_a..., with a choice quote: "I feel like I discovered a programming super power or something. I mean I did expect it to be faster, but not this much faster this easily!" You can also check out the videos here: http://usehelix.com/resources

Rust also makes it much easier to write reliable software. The best example of this is with multithreaded programming (which is something you might reach for for speed), where Rust gives you guarantees not found in any other major language: you can know for sure that data is owned by one thread and not accessible by others, and the compiler will check this for you. You can know for sure that you only access lock-protected data while holding the lock. Rust will check thread safety for you, and more. You can read more about the concurrency benefits here: http://blog.rust-lang.org/2015/04/10/Fearless-Concurrency.ht...

Relative to Go specifically, in addition to the reliability improvements, Rust supports a wider range of "systems" use cases. Unlike Go, it does not require a garbage collector or other runtime system, which makes it very easy to write small Rust components that can be used with a large script, or to write extremely performance-sensitive or low-level code like a browser or game engine, an operating system, or a bare-metal web server. One reason that Dropbox switched to Rust from Go for one of their core components is greater control over memory footprint, which allowed them to reduce their server memory needs by 4x, leading to significant financial savings.

The slogan I've been using for Rust personally is: Confident, Productive Systems Programming. You can write fast code. You can write low-level code. You can do it with high productivity, thanks to the work on modern tooling and ergonomics. But most importantly, you can do all of this fearlessly, because the Rust compiler has your back.
To be honest, although GPUs are super cool, I have to admit a bit of disappointment in practice. I don't know about databases, but in the machine learning community ones sees usually about 6x to 20x speedup on GPU. This is amazing, of course, but far below what, way back, naively thought we'd be able to get from GPUs -- i.e., 1000 processors instead of 1, we should get a 1000x speed-up, right? Not so at all. So many architectural issues (i/o, memory, even sometimes algorithmic limitations) get in the way of achieve true parallel linear performance.
This article reads pretty lazily in my opinion.

It fails to mention that the CIA had an internal hunt for the contractors which leaked the "Vault7" arsenal - confirming that indeed it was a contractor and indeed that they had mishandled the arsenal by providing global access to the weapon cache.

It also failed to mention the full original story provided by the Shadow Brokers and those that reported on them: that NSA had (similarly) mishandled hacking tools by loading too many of them onto attack staging servers. This story has not changed, nor have the recent publications contradicted it. In fact the Shadow Brokers said exactly what they were going to publish when they first went public and have followed through with what they said they were going to publish exactly.

The author speculates and conspires that both of these must be Russia. Mostly it's the standard fare conspiracy theorist "to whose benefit" but it's clear the author doesn't understand whether and how Russia would benefit from these disclosures.

Finally, after all the public panic induced over "Russian hacking" during the election, there's been no intelligence summary, statement, or even Congressional statement to the affect that either the Shadow Brokers or the Vault7 leaks are in any way attributed to Russia. Wouldn't that have been fuel for that fire?

My guess is that the Shadow Brokers are a criminal organization with informal relationships with state intelligence services. My guess is that Vault7 was a CIA and contractor who shared the massive trove too broadly, where it ended up in the hands of the Wikileaks journalism reporting outlet.

The author appeals to Occam's Razor only by name. The lack of careful analysis in the article insists, unfortunately, in using unfounded speculation in the place of evidence, and horror, to then appeal to Occam's Razor on behalf of assumptions.
This isn't just open access (free redistribution) but, much more importantly in my opinion, free reuse and adaptation (with attribution), i.e., CC-BY.

https://creativecommons.org/licenses/by/4.0/
Well, that's mostly how the feudal system came to be.
He used to work as a lawyer for Verizon, so his ties to the oligopolists are well established.
To their defense, it seems to be an app that demonstrates usage of the library. Also seems to used for benchmarking. That would explain why the Redis database can be easily flushed through a simple URL.
My left and right nuts
>... and there are plenty of other cool bits in the language.

Could you elaborate what you think is cool there ("other cool bits")? Serious question, I'd like to hear a personal opinion.
I predict a lot more attention to 'change of control' clauses in supply contracts.
gRPC has some benefits over REST. Since it's declarative, the entire API can be expressed as an RPC block in the .proto file, so your clients in multiple languages can be generated from this spec. With REST, you'd have to tell clients what protobuf structs to use with what endpoints. But of course the end result is roughly the same, once you've built clients and servers.

gRPC's built-in streaming and support for out-of-band data ("header" and "trailer" metadata) is also nice. For example, a gRPC server can emit trailing metadata containing an error, if something goes wrong halfway through a streaming request. Without this, you'd have to build a custom "protocol" on top of your Protobuf REST stuff; the stream would/could emit oneOf-structs that contain either payloads or metadata.

One downside to gRPC/Protobuf is that it's much less convenient to perform quick and dirty interactions against the servers. There's no standard, I think, for exporting the gRPC API to a client that doesn't already have the .proto file; I could be wrong, but don't think you can build a generic client that can talk to any gRPC server, list its available endpoints and so on.
I suppose pretty much everyone here already knows, but when making this specific type of comment ("I'm far more productive in Rust than C"), can you please disclose that you are one of the core people involved in Rust/Servo?

It's almost like Chuck Moore coming on HN and saying he finds Forth to be the most productive language. Of course it is, for you. (Nothing against the productivity of Forth or Rust.)
I have never found a good example of a Python web server that provides some mechanism for statefulness. Is it just fundamentally not possible to have shared state among requests handled by the threads of a process? Sanic's examples seem to be the same as Flask's: self-contained function calls attached to endpoints.

I keep hitting a wall with Python when I want to do something like:

1. subscribe to a websocket connection and keep the last received message in state
2. expose an http endpoint to let a client GET that last message.
SpreadShare: Explore community-curated spreadsheets for startups/professionals
I'm the opposite. I only like ebooks for technical books because i can search for keywords.
> I think it's not out of the question it's multiple motives, too. It's not impossible someone chose to grab some stuff due to moral objections, and is feeding the information through some channels that themselves have their own motivations.

That would be my guess as well - an application of so-called "Fourth-generation warfare". In the same way that ISIS seeks to encourage self-radicalization, since it is virtually untraceable, Russia (or really, anyone opposed to US interests) would aim to create a climate where NSA/CIA employees "self-radicalize" in the sense that they become convinced that those organizations are engaging in illegal or immoral activities.

So, create organizations like Wikileaks, people like Ed Snowden, plant news stories, etc. At a high level the idea is that you create a broad-spectrum propaganda campaign that is designed to encourage insiders to leak secrets for the benefit of their own conscience. If you reach the right people you can gain access to tons of secrets in a way that is 100% deniable. No payments, no meetings or communications with Russian agents that can be tracked, etc.
>Writing new code in Python 2 is completely nuts and just makes everyone's life harder (including your own).

And when it makes someone's life harder, they will change. If it's too late for them and affects them, they will have themselves to blame.

This, really, is the only reason for people to change to Python3. Yet people keep evangelizing all its great features, etc as if the existence of a much better language suddenly obligates everyone to switch to it.

It's fine to point out potential repercussions of not switching now. But moralizing it is counterproductive.
Tor 0.3.0.6 is released: a new series is stable
My Takeaways from a TDD Debate Between Cope and Uncle Bob
It's behind a paywall but take these public short position declaration with a grain of salt - it serves them and their financial positions when it gets media exposure.
It's not in USD is it?
grzm covered it well! But let me know if you have any other questions or are generally curious about how the code is structured. I learned a lot myself while writing it.

I'm @jdan on twitter if that's a better avenue for you (DMs are open)
Libreboot: Formalising Democracy
Security vulnerabilities in Evoko room booking display