skysight-inc/HackerNews huggingface dataset:
Super = above. Natural = life. US criminals are regularly sentenced to things beyond any concept of their natural lives. There is no legitimate purpose behind these. If a charge is later dropped or overturned, in a normal country, the person is re-sentenced accordingly. Stacking life upon life, decade upon decade, is just scoring points. In countries like Canada or the UK these would be deemed indeterminate sentences meant to put people away for life for crimes that would not normally warrant such treatment.

Some of these (10,000+ years) read like something from a harry potter novel, not a realworld justice system.

https://en.wikipedia.org/wiki/List_of_longest_prison_sentenc...
But just adding the null byte isn’t necessarily safe if you’re dealing with Unicode, right?
Read his comment again.
"I'm not sure what can come of performance and security running JavaScript outside of a browser" well we already know about performance. Ryan was mentioning and demonstrating that JS is in a sandbox already and if modifying node to have message passing with dispatchers mirroring on native and js sides, you in effect have very tight security as you are strictly allowing only sys calls that are going through a single point and can be managed through a single point. Seems like that one is figured out with Deno.
How the UK's Top apps are handling GDPR
Welcome to France. We got postal strikes any Tuesday. You'll get used to it.

Wait for the transportation infrastructure to give it a try, then the real fun starts.
To piggyback on what others have said, if you're in a certain type of company then interrupting you to talk is an important social status symbol. It's an implicit (and sometimes explicit) signal that their status is greater than yours, and your submission to them is more important than the value you create for the company.

If this is the case, I'd highly recommend finding a place that values your productivity.
I hate to be the bearer of bad news, but that cooler is smaller than the Threadripper socket.

https://www.gamersnexus.net/images/media/2017/CPUs/tr-1950x/...

There are "proper" TR4 coolers, such as the Noctua TR4-specific air cooler which actually covers the entire socket, for a maximum connection between the radiator and socket.

https://i.imgur.com/R0WbTSa.png

Pictured there is the Enermax TR4-specific liquid-cooler. There is another one on the market somewhere, I forgot the name though.

Anyway, the bigger heat-plate makes a big difference. People have measured somewhere on the order of ~10C to ~20C cooler.
This isn't entirely true. GitHub's wikis and the gist system are both backed by git - because it makes sense for those.

It wouldn't make so much sense for issues, pull requests, etc. If they were backed that way, they'd very likely be rather slow to query (as GitHub doesn't keep the latest data in a "checked out" state).

Not to mention the fact that you can just ask them for a data export and they'll provide it all to you happily in JSON format.

This post doesn't really have much reality backing its criticisms.
The vast majority of projects do not require reliability above what can be simply and cheaply achieved. If/once your project gets to the point where reliability is a concern, that's the exact reason you wouldn't want to rely on a free/cheap 3rd party. The case in point is the one I referred to, GIMP had already seen SourceForge as an issue and had abandoned them over two years before the incident. And lots of other projects have taken on the task of hosting their own. However "gargantuan" the task may be, it's still usually a drop in the bucket compared to the overall project.
This is literally the dumbest statement I've ever read on this website
Is there any reason not to use snprintf for almost every application of string manipulation (aside from strduping)?
You can find numbers for those here: https://www.bls.gov/news.release/empsit.t15.htm

They are all going down and have been almost constantly since 2008. It's at historic levels.
> If I don't want to join a union, who are you to force me to join and steal money out of my paycheck to boot?

One argument is that you didn't choose to join the IRS, yet they are allowed to steal money from your check.
1) Lots of unions and guilds don't operate like this; maybe you get more based on seniority, education, performance reviews, by hitting targets, or some other measure. Maybe the guild (think of the hollywood ones; writers and actors guilds) sets a minimum pay but you're able to negotiate for more. Union=same salaries is far too simplistic, there are lots of ways this can be negotiated.

2) Same is true for non-union workplaces - you don't like how a place is run I guess you're going to be unhappy there. With a union (that you can take part in, vote for your leaders, vote on your contract, etc.) maybe you can change that.

3) Sure, if your union/leadership is corrupt. Vote the bastards out then. With no union...the company just keeps that money that would have been used to bribe a union official. Not clear to me that's better for the worker.

4) Maybe. Maybe the union attracts better employees, improves retention, etc. and leads to a better and more profitable workplace. Maybe the whole industry gets unionized so it's an even playing field and the owners of all companies lose (and workers gain).

I certainly think it's possible unions reduce the total amount of wealth generated from a system. But so what? I think society would be better of if, for example, Walmart made $90b instead of $100b and the workers gained $9b. (Numbers completely made up, of course).
What do you mean on a large scale? in cytpo eschanges, large orders only lead you to pay too expensive (or sell too cheap)
Thanks for the details and big picture. Very nicely put.
You seem to be making quite a habit of it.
Money is not ethnicity.
You can. It is their business to satisfy their customers (advertisers) and the advertisers don't want to be seen in a political light or near hateful comments and trolls. It is totally understandable why they would do it.
Wow man that's really awesome. Would you mind doing a blog post about it sometime (or maybe linking to the source where i can learn more about it).

It can help a lot of people like me who are struggling to work even 5 hours a day at just 37.

Still thanks for the reply, I am now seriously thinking of getting a standing desk.
Facebook AI (Music Translation) In-Depth Analysis
Back in the 90's I saw the same thing when living in Brazil. A friend in his 70's who owned real estate in Rio owned a Rolls recently returned from NYC. He said he was shocked at seeing the hatred in the eyes of people in NYC. He countered how he could stop for a coffee or beer or anything else and just talk to anyone who was there regardless of the socio-economic status. I had to agree. I always wondered why there was not more discontent.
Yet github has still had outages from being the target of nation-state attacks. The bigger the service, the worse the enemies.
You are imagining the worst possible execution of these ideas. Nobody is proposing that you should start using libraries that pull in code from random domains, unless you have some specific need to. Whitelisting sources is such an obvious step, given the security focus, that you should really have applied the https://en.wikipedia.org/wiki/Principle_of_charity in your speculation.
>or .gov, it's essential

No. That is wrong. All of government is overhead, it's like an operating system that way. Public employees should not be collectively bargain to extract more money from taxpayers. If compensation is so bad in the gov't then the employees can organize to get someone else voted in to turn things around. Furthermore, because so much of what happens in government is subject to public scrutiny (as it should be, it's our money) there's much less space for the government to poorly compensate its employees or treat them like crap.

Edit: did people forget what a great contribution to society police unions have made?
Wouldn't it be smartest for the employer to actually pay the non-union employees more? Why let only the union collect fees on its members?
git is basically a block chain by design. Both it and bitcoin use variants of a merkle tree
Not if you want the currency to replace traditional currencies in the future.
A more stringent significance standard doesn't just make it more expensive, since if what you're seeing is a statistical fluctuating, it will most probably disappear upon collecting more data, not get stronger.

Confidence in rejecting the null isn't "somehow translated into support for the researchers' favorite theory", it's translated into support for the existence of a signal, which makes sense since the null is the background-only hypothesis.

After we establish rudimentary support for a model by finding one or more such signals, we can then embark on the process of doing precision measurement to really test that model (as is being done for the SM).
You’re more optimistic than me if you think a proper example will stop this sort of thing. How much hyperinflation happened since the Weimar Republic?

(On the other hand, didn’t the first crypto wars end around the time someone put the RSA equations onto a T-shirt to circumvent export rules?)
Bitcoin ETF Dreams Kept Alive with New SEC Filing
The modern use case for strncpy is for filling in the .sun_path member of struct sockaddr_un. Most people assume that the path needs to be NUL terminated, but the BSD Sockets API actually relies on the declared sockaddr length parameter. It's not superfluous and the kernel will only read .sun_path up to the end of the declared size of the sockaddr structure; it doesn't expect NUL termination though it will obey internal NUL termination.

Moreover, the statically declared size of .sun_path in the libc headers doesn't limit the maximum length of the path. On most implementations you can create domain socket paths larger than this. Indeed, when you use an API like getsockname() you normally should check for truncation by comparing the returned sockaddr length with the size of the buffer you passed. Just like with snprintf() and strlcpy(), if the returned logical length is greater than your buffer size the path was truncated. IIRC, not all implementations (or any?) include a NUL byte as part of the length so you can very well end up with a .sun_path that isn't NUL terminated if your buffer only barely fit the path. Likewise if you didn't 0-initialize the path buffer and the actual path was shorter, though IIRC kernels handle this second case differently--some might NUL terminate for good measure if there's space.
> It's just a place where you store your git repo.

But Github is so much more than that. It's a public forum to discuss and prioritize issues, a social network to start projects with friends, an automatic portfolio of sorts for your resume, and a really well managed, nicely integrated, reliable service.

This is all, I think, a function of its scale and the traction it's gotten.
Nobody cares that they make money. They care about it not being open source or having easy-to-migrate data (lock-in).
Intel could ultimately try to make their processors using the other foundries until they get their tech sorted out. If I'm not wrong Samsung sells phones with Qualcomm processors and, consumers don't care much about that.
I don't know - it doesn't seem like it has - or will - fall for as long as Apple keeps control over iOS.
This is good but (and it's a big but) DO NOT ACT ON THEM IMMEDIATELY.

There are likely plenty of things that seem askew or just plan wrong - and many of them are - but you have neither the understanding or earned authority to act on them. I love the idea of inventorying things you think are issues, problems or mistakes then reviewing them after 3,6,12 months (you'll know when you have the right to question the status quo) and tackling the ones that you now KNOW are wrong.

A very common mistake of new members of a company or the workforce is to blow into an organization, shit on everything and destroy any chance of affecting change. Covey is right in "seek first to understand, then to be understood".

Now if you're a management consultant, do exactly the opposite of the above; that's why you get paid the big bucks - to rattle some cages!
> Money is not ethnicity.

It's the metric by which you stereotype people. You're just making my point for me.
Well they have a purpose: they give the manager the illusion of credibility and power, and the developer they give the illusion that there would be a chance for a raise if he would be just a little better. And let's be honest. We love to be rated and climbing the virtual ladder of getting more points. That's human nature. So in some regards it also gives everybody involved the illusion of meaning.

That is more purpose than most of your work has, if you really look at it from a bird perspective.

> A performance review is supposed to be a tool for learning and career development.

This is the misunderstnading. If a politician says he's going to lower taxes, we laugh about it. But when a CEO says he wants to do performance reviews because he cares about how good his worker bees are we believe it? He mostly cares about his bonus and having people clap at his brilliant presentations.
I know it’s anecdotal, but coming from DC/Baltimore I was pretty amazed by the roads in Munich.
It varied depending on the domain. In one company it was a high traffic online merchant, and customers were basically a random sample of the middle-class population at large, no better-than-average-person computer literacy.

In another case it was a multimedia company and the search users were producers, artists and technical directors, with much more of a power user mentality to searching for what they wanted, and jobs that required basic computer literacy and maybe familiarity with special GUI programs.

But I’m telling you, in every focus group or A/B test or user session we ever looked at, at any of these companies regardless of the user characteristics, the absolute number one thing every time was user requests for more and more categorical filters to allow them to efficiently exclude huge classes of results they know are not relevant to them.

Amazon (I did not work there) actually gets this right, with lots of brand, size, color, Prime-eligible, etc. filters for everything. That stuff requires no machine learning, is simple to implement and A/B test and measure usage efficacy for, and people really want it.
at least some research into types and productivity showed that the highest productivity was when function signatures have to have types but type inference exists inside functions (like auto in c++, var in C#)
Exactly. But an OSS community is very different from Twitter or Instagram. People will migrate to another website if Microsoft screws this up. Even if they don't screw it up, a lot of people are already willing to move because they hold grudges or are against a company like Microsoft owning the space.

If a GitLab or Gitea-backed community surfaces managed by a foundation, GitHub will be vulnerable.

Right now there isn't much of a point in moving to GitLab.com because they could be acquired as well.
To use the author's own rubric:

Q: What is the goal? What are the problems or opportunities it is addressing?
A: Be as "fair" as possible in determining raises and promotions, attempting to control for different roles / projects / levels / external factors.

Q: What is the cost?
A: 2-4 weeks of company time each year.

Q: Is the process achieving that goal, for an acceptable cost?
A: Yes... how else would you accomplish this goal?
> Not sure I get the value. Unless you like motherboards with LEDs hot glued everywhere.

Clock and single core performance absolutely matters to some customers. This is part of why Intel can continue to dominate the home and server market despite selling lower core count chips — they are clocked a little higher and have a little higher IPC.

(Also, I totally agree about the silly LEDs, but I also think board manufacturers wouldn't do it unless it produced a return, i.e., added value on average.)

> To compare: Epyc 7351P, 2.9GHz, 16 core, 32 threads, 8 memory channels = $799

> TR 1950X, 3.4GHz, 16 core, 32 threads, 4 memory channel = $959

7351P @2.9 GHz is the boost clock — base is 2.4.

1950x @3.4 is the base clock — boost is 4.0, on up to 4 cores (not all-core like the 7351P part).

> So generally the 1950X will be 17% faster with no cache misses, and 50% as fast with all cache misses.

Your 17% number is sort of wrong, or missing the point — yes, that's the clock difference for all-core workloads, but TR boost kicks in at 1-4 thread workloads.

4.0/2.9 is huge. That's 38% additional CPU on (very common) 1-4 thread workflows. That's worth a premium to some people.

The obvious question you might then ask me is, if your workflow is only 1-4 threads, why buy a 16 core CPU? Well, sometimes people have workflows that vary over time. Maybe some of the time you only need a few cores to manage interrupt traffic and keep the GPUs fed, and maybe other times you do want all of the cores to complete a parallelizable, CPU-bound task like compilation or h.265 compression faster.

If your workload is exclusively embarassingly parallel and you can keep all cores busy all the time, yes, a server platform like Epyc 7351P is a much better value for you than TR. Or if your workflow needs more than 80 GiB/s (TR1) or 95 GiB/s (TR2) memory throughput, a server platform like Epyc is probably a better value for you.

> Sure the future thread ripper 2 will be faster... but so will the Epyc 2. Not sure I see the point in the TR.

Epyc 2 will almost certainly not be clocked higher than TR2, due to the additional power draw the TR socket has vs SP3 — though, the gap may shrink.
The head hunters that fill my inbox.

I guess with 2 021 worldwide currently open positions on LinkedIn, there is something for many of us to be busy for many years.

Classic music also has been on the decline for centuries, yet composers still sell albums.
Open source platform for the complete machine learning lifecycle
I have the simplest self hosted wordpress blog. That's not really what I'd call "critical infra". It still goes down a few time a year.

My non self hosted blog ? Maybe a few hours a year, and I don't have to do anything to restore it.
Me too. Or a layman's level worked write-up.
> If you work for a mega-org or .gov, it's essential.

Government jobs?

People dont get fired from those anyway.

You have a monopoly service and monopoly workforce. This is recipe for disaster.

At least a monopoly workforce in the private sector can bleed a company dry and force it out of business.

The government? Well they raise taxes + increase debt... Or the service just sucks.
This fails from the false dichotomy of speed of execution vs speed of development (which includes fixing bugs). Well written languages optimize to a certain weighted preference of the two and some languages deliver more of _both_ than others.

For example; Typescript is fast to write. and Golang is reasonably quick to write, _and_ execute. Both should have ~15% less bugs than javascript, potentially making them faster to develop (where bugs matter).
But then, the Linux kernel really have multiple sources of truth, depending on what version you are talking about (Linus branch, mainline, vendor forks, etc)

The main point isn't about the source code, it's about all the rest : bug report, discussions, planning..
Most every article ever written about the IPv4 vs IPv6 debacle outside of the knowledgeable tech sector is usually false in some big way.
damn was expecting an important amazon package this week. Hope they get what they want soon!
Apple would be wise to release "beta" C and either C++ or Rust bindings for iOS. It is LLVM developers care about not Swift.
Malicious intent is absolutely a possibility but I think you'd be surprised at the amount of exchanges running off the regular consumer wallets (such as bitcoind and altcoin equivalents). These pieces of software are not meant to support the massive amount of transactions that exchanges see and do actually need quite a bit of maintenance to keep operating well. The industry is still in an infancy stage and the tools we are all using tends to reflect that more than anything.
There was a very recent Supreme Court decision that impacts this - employers can insist (as a condition of employment) that employees use arbitration only for these kind of claims. Which makes class action suits impossible, and leads to more and more wage theft - since stealing $1000 from a bunch of employees would be enough to warrant a lawsuit if done collectively, but not if each individual has to go through arbitration.
That is an even better argument for unions pushing for education and ensuring people qualify for specialist work rather than being solely focused on salary.
I haven't said anything about what Tolkien thought or his wartime experiences. What I have commented on is his fantasy stories and similar types of story, which are staples for some audiences (and in this case apparently beyond reproach). They are separate things. Tolkien may have been a great, balanced humanist in his letters, but his stories are about good and evil, surviving grim circumstances, glorious battles and magical kingdoms. It's very likely his books were moderated by his publisher, who would specifically ask that nuance be removed.

There are plenty of examples of nuanced war stories, with more consideration and without requiring the use of "evil," for example by Kurt Vonnegut or Joseph Heller. But the path of reading those books starts in adulthood.
The intentions of the authors is for Swift to take over the world. But the way it's going, it will probably become stuck on Apple's ecosystem like Objective C.
Should have waited until November.
You underestimate our engineers :-)
> possibility for corruption

Did we prove 99.99999=1? Not sure if that was a youtube myth or a reality.

Whatever the case, union corruption is worse than the petty fee they charge.
Why is every other sentence bold in this article?
I pretty much agree with your points, but I don't see the relationship to this topic. It seems possible that you have misunderstood what these news stories are about (or equally possible that I have). This story is about Facebook giving "privileged API access" to certain companies. That means that when users give their login credentials to those companies, they can access certain data about the users in certain ways. However, as I said above, if the user gives those companies login credentials, the user is already putting a frighteningly large amount of trust in that third party. There needs to be much more awareness of this.
That was meant to be a reply to https://news.ycombinator.com/item?id=17248468
That is roughly $1000 Saving per server. But is it really worth the effort? Even for Facebook.
Depends on local laws. In the US, it's very tough to protect compilations of otherwise public facts.

The real answer, however, is that if you had the funds and it made good financial sense to challenge and pursue them, your whole perspective on the affair would change. Litigating such a messy case would be very, very expensive (again, in the US at least).

One goal in licensing is to think about "how do I make violations clearcut and cheaper to enforce?" Your approach might require proving how they compiled their code together -- i.e., was it just coincidence that the two ended up looking similar? What if they coded their own VAT tax code but used every other piece of your code? Would that be enough to get around the GPL license? Just a couple examples of why such litigation would be so complex and expensive. You generally don't want to have to get into motives and process -- if you can't look at the two codebases and decide the case, it will be messy.

I'd just keep more of your code proprietary and only permissively license the stuff with very broad appeal.
SwiftObject (JavaScript Inspired Object Playground)