skysight-inc/HackerNews huggingface dataset:
Yeah, I don't really understand about this, especially the security aspect of Gems.

Every piece of externally-maintained code is a security risk, surely? You are implicitly trusting the maintainer of that Gem to not hide bad things in their code. And every Gem that they depend on. If the Gems are old and the maintainer is unpaid and doing other stuff, how sure can you be that they're still vetting all contributions for security? Or that they haven't handed over the maintenance to someone you no longer trust? Or that the maintainer hasn't succumbed to economic pressure and included some malicious code in their Gem?

Or do you have to manually review every single line of code in every dependency yourself? That seems like a lot of work... I would definitely prefer to write my own code for a feature than review 1000's of sloc of someone else's code to spot any problems.

I get that the core Rails codebase gets security-reviewed regularly, but does that happen for Gems? And is it methodical and thorough, or is it just "lots of eyeballs"? And if so, is there a threshold of Gem popularity below which there aren't enough eyeballs to spot problems and the Gem should be considered insecure?

And if you do spot a problem, do you report it and hope the maintainer has time to do something about it? Or do you write a PR and submit it, hoping they accept it? Doesn't that then mean you're maintaining someone else's code base? Again, I would massively prefer to write and maintain my own code than maintain someone's else code (or wait for them to fix a problem that they may no longer care about).

How do you build a secure application for something as trusted as Github while gleefully incorporating all this third-party code?
> So, instead of contributing to scaling (like Apple and Bloomberg and Cloudera did),

Apple has 2-4 different search stacks. The web search one is fully homegrown and closed source.
There is also Zig, which seems nice as a C replacement but still highly unstable, and Jai, which is also a nice C replacement but currently has no publicly available compiler yet... So for the time Rust is the only new systems programming language (And please don’t say Go/Nim is a contender, they’re good languages in their own ways but having a garbage collector disqualifies it fron that categorization)
It is pretty suprising, all things being equal.
I'd suggest keeping a close eye on this issue: https://github.com/Microsoft/MS-DOS/issues/2
> You could store a session id in a cookie

But the person you responded to asked what happens after "I clear my local storage/cookies". So you don't have access to the session id. It was in a cookie that is now gone.
> The real thing that put Hitler in power to begin with was the horrendous war reparations Germany was saddled with from WW1 because it was "last man standing" on the losing side.

I live in the Netherlands and I remember being thought that in school as one of the reasons of Hitlers rise to power.

The Dutch wikipage [1] of the Versailles treaty also reflects this in a section called "consequences of the treaty" (De gevolgen van het verdrag).

[1] https://nl.m.wikipedia.org/wiki/Verdrag_van_Versailles_(1919...
As suggested in the introduction, one would think it was called "the relative performance of C and Rust" because this article is a corollary to a previous article and conceived as a response to an inquiry regarding that previous article--specifically, to answer the question "in your given benchmark, what explains the relative performance of C and Rust?" :P The basic answer: "data structures"; the insightful answer: "data structures that were originally chosen to play to the different strengths and weaknesses of their respective implementation languages, giving us food for thought as to how language design can shape the solutions that users of that language will tend to arrive at, and the performance implications thereof".
Fortunately, we do not have that problem :-).
Amazon TOS:

> Any dispute or claim relating in any way to your use of any Amazon Service, or to any products or services sold or distributed by Amazon or through Amazon.com will be resolved by binding arbitration, rather than in court

> We each agree that any dispute resolution proceedings will be conducted only on an individual basis and not in a class, consolidated or representative action. If for any reason a claim proceeds in court rather than in arbitration we each waive any right to a jury trial.
I've heard of herding cats. Have you heard... bird is the word.

TGIF :D
Good point. I never understood why the developers of every language don't make it trivial to build a .exe or .app file that users can double-click to run. Seems like the Python team is penalising developers for using Python :)

It can internally use an interpreter, JIT, bytecode or full native code like C. That's a different discussion. Just don't make it a pain to distribute.
I wish nothing but the best for this guy, but I think it's kind of sick how we romanticize and valorize people who do nothing but obsessively work and neglect their relationship with their partners and magically pull off their project in the end to become rich. It's a gross fantasy. At least this doesn't have the "vindictive and abusive" genius aspect of these stories you typically hear like in the Steve Jobs archetypes or whatever. He seems like a nice person and I really like his game. I just think its incredibly sad that this is perceived to be something to aspire to.
New Flashpoint 5.0. Over 6000 games added to collection
https://outline.com/GDe2SD, for anyone else who found that hard to scan.
In test case, U.S. fails to force Facebook to wiretap Messenger calls
CPUs today have register renaming, but not at the level the programmer sees the machine. At the level where the machine is superscalar, x86 CPUs have far more registers than the few the user sees.

Having many registers at the programmer level turned out to not be all that useful. SPARC machines did that, but it wasn't a huge win.
A decently large part of the field of Numerical Analysis is actually dedicated towards figuring out how to address and deal with these problems. Really quite a fascinating subject.
Letting your dependencies automatically update themselves is a great way to introduce security bugs. Not every update is necessarily an improvement.

I prefer the middle ground of pinning all dependencies, and using an external service to warn if any dependency has a known CVE.
/r/neoliberal has a fantastic slogan/soundbite for you to use.

"legalize housing"

a people ideologically against government intervention should be all for removing government barriers to building what you want where you want. that includes corner stores and town houses. they naturally should be against the gov telling you how much setback you need and how tall you can build.

don't phrase it as we need to zone for corner stores. phrase it as we need to legalize corner stores.
Any idea what language they used to implement these in?
> "Amazon, in court filings, denied mixing knockoff Fuse Chicken products with genuine ones. The company says it has a zero-tolerance policy when it comes to counterfeits and aggressively pursues legal action against bad actors."

A zero tolerance policy doesn't mean much if you don't give out enough first strikes.
> The spread of cheaper knockoffs can also put pressure on authentic sellers and brands to lower their prices, helping Amazon win more customers.

Ugh, how cynical.

"Your reputation is my opportunity."
At a certain point, bookmarks are just better. I also think at 60 open tabs, I'm not convinced the content was that interesting if you're never getting around to reading it.

Regardless, I have been mostly Firefox for a couple of years, with a little Safari thrown in, and I've been happy.
5mb!? Wth!
Is that better than Mail for Mac? My only need is reliable syncing and fast update, which Mac's mail is ok at, but needs variable amount of time for refresh, and if I need to verify my email, I mostly just open Gmail web.
The way Lightening Network is designed kills the p2p aspect of the Bitcoin protocol.. LN is predictably to benefit capital holders with enough excess capital to act as the backbone hubs. Normal users will be unable to bypass the Bitcoin banking/payment processor LN hubs and unable to reliably route though peer to peer paths on the LN.

This presumably is intended to enrich the Bitcoin oligarchs as a passive way to extract rent and wealth on the network simply for controlling existing capital.

This design choice indicates either a comic level of negligence, or intent to shift away from p2p to centralized information control.

only a 1% chance of successfully routing a $67 payment on the lightning network:

https://i.redd.it/twku0lwslz411.jpg

Sending payments using the Lightning Network is cheaper
than the regular Bitcoin network, but suffers from
routing errors and wallet bugs that make it impractical
even for highly technical users. [1]

[1] https://medium.com/andreas-tries-blockchain/bitcoin-lightnin...
Good points!
>ICE vehicles are hideously inefficient compared to power plants.
Any source for that? I was wondering about power transmission losses as well.
I mention this frequently but an alternative is https://miniflux.app/ - it’s easy to self host, fast and written in Go. It also syncs with every RSS app that supports the Fever API. It’s one of my favorite self hosted tools.
The Windows series of games are 16 years old today

It's still pretty successful worldwide, with major fan conventions and contents being released in PS4, Steam, etc. Quite an interesting phenomenon.
You've nailed it. Becaise of YC's increased ownership, founders will either have to raise less from SAFE investors or take more dilution, because this change won't make those SAFE investors be willing to pay higher valuations. That's the downside.
Code coverage is a very poor measure of quality of your tests. You can have lower coverage and great tests, and high coverage with completely useless tests.

I use test coverage as part of my workflow. Run my tests with coverage on and make sure my new code is fully covered. Kinda like a sanity check to make sure I'm not missing anything. Or if I'm stepping into old code and I want to see how well it's tested, I'll run the full suite with coverage on and see how bad it is.

The second management starts asking for x% code coverage is when it starts to break down, imo.
Being an active Fediverse user, I've realized that what people realize is that when they say they want to decentralize Git, they often aren't thinking about decentralizing Git; they are thinking about decentralizing GitHub/GitLab/Gitea/etc.. They want to decentralize the social aspect, the issues trackers, the ability to automatically pull fresh changes from other parts of the web via webhooks.
Other than a non functioning economy where wealthy oligarchs control everything simply for showing up a few years early and taking control of the money supply because they already had surplus capital to either mine or purchase the easily produced Bitcoins in 2009-2016..

Bitcoin has a higher inflation rate than USD.

Bitcoin inflation rate per annum: 3.87%
USD Current inflation rate for the United States is 2.7%.

Early in Bitcoin history, by design Bitcoin went though a period of hyperinflation where Satoshi and a few users acquired most of the coins in circulation.
Aprox 4.11% of Bitcoin users (addresses) control 96.53% of all bitcoins in circulation.
Firefox has severe performance issues on high dpi displays on macOS. It’s gotten better in the latest nightlies but still an issue. As an unfortunate (for your eyes) workaround you can do Get Info on Firefox.app and enable low resolution compatibility mode, then restart Firefox.
If it's any form of token, a legitimate product could be obtained and resold or returned without the token or with a fake. (How would it be validated prior to use; and if you did provide that oracle, how would you prevent botfarm abuse checking codes?)

The serial number on the product and a token to claim that number as a pair would work, at least in so far as someone would then have to obtain a large number of units and fake exact numbers. That should increase the chance of tracing a buyer; more so if the unit number is also on the outside of the box and it's registration can be checked prior to opening the box.
It would have been kinder for you to Google first:

https://en.wikipedia.org/wiki/Predatory_pricing

https://en.wikipedia.org/wiki/Competition_law
I think the whole Dieselgate affair was a huge benefit for the future of electric cars. Because at least in consumer cars the uncertainty surroundig possible limitations with driving into cities (in Austria and Germany) if you have a diesel car will almost erradicate this market segment in the next few years.
I'm not going to pretend to understand the validity of your claims frankly because I don't.

I've seen some discussion of supposed possible race conditions on LN, apparently the gossip protocol is temporarily being used for routing and means there is no problem? (I'm a layman obviously.) But people seem to think that that will carry LN for long enough until an improved routing protocol is developed.

Do you have a source for your claims? I'm just seeing your hypothetical/theoretical scenario predicting doom, while there's dozens of people in multiple organisations working on lightning, and you're claiming they're all corruptly serving an "oligarchy" so it's your word against theirs.

Also afaik there's thousands of nodes on the live lightning network and it's essentially working.

If it was true that anyone with a basic understanding of race conditions can see the network won't work, then surely LN wouldn't get off the ground or would be being savaged on a hundred people's blog posts or what have you, and it's not.

So basically, I don't know if you're right but I'm finding it doubtful.
How is that even possible? Kind of defeats the point of having a justice system...

EDIT or let me rephrase that question: what's the original purpose of such forced arbitration clauses existing? How do they contribute to the public good?
Interesting.

The unfortunate reality is that a lot of so-called artists have absolutely nothing to say. All they do is "challenge", "undermine" and "subvert" shit, mostly out of subliminal boredom. Since this hoax was aimed to challenge, undermine and subvert "modern art", it is therefore indistinguishable from "modern art" except by the fact that the author was aware of what he was doing and had a more sensible motivation.

It's hilarious how critics try to twist this the other way around, saying "ob, but his parody ended up being modern art after all". There is no "after all". That's the whole fucking point. That's how good parodies work. A parody on Kung-Fu movies is, by definition, a Kung-Fu movie. No one outside of art circles sees this as some kind of "reversal".

(Post)Modern art is a parody that went on for too long, where authors collectively forgot they're doing a parody, started taking themselves seriously, and tuned into pretentious, arrogant twats, who mock others for "not getting it".

You know what comes after post-modern art? The next big "movement"? Internet memes. Mark my words, in 30 years there will be dipshits writing academic papers oh the hidden meanings and symbolism of Grympycat and Pepe the Frog. And there will be other dipshits trying to replicate "meme style", using MS Paint and showing off the resulting garbage in meaningless expositions.
I don’t know. The biggest shady coupon sites have been around for a long time now.
Normies don't have many choices for low-level development.

It's nigh impossible to write correct C and keep it thay way over the project's lifetime, C++ is too complex and so is Rust.

I think that's why Go is so attractive, it really is reasonably simple to wrap one's head around.
This was without a doubt my worst fear when filling out the visa application form. I went back and rechecked five times, just to ensure I didn't actually declare myself a terrorist.

Now, I know what happens.
absolutely.
dont you enjoy these painfully long and out of breath explanations on why this inconvenient majority of voters must be further disenfranchised ?

and all of the appeals to the authority of the EU's rules and regulations and why that makes it "impossible" ?

what hogwash. we all played by the same rules which were agreed upon beforehand and now the economically well off (and isolated) minority seek to invalidate the vote.

I think if the 'vote' is taken away from those who voted for Brexit then they'll do you one better and choose to ignore more fundamental aspects of our "social agreement", namely ones involving physical safety.
> In 2006(sic) the UN's Working Group on Arbitrary Detention concluded he has been subject to arbitrary detention by the UK and Swedish since 2010.

I have found it very difficult to understand the basis for this finding tbh.
Facebook blocked users from posting some stories about its security breach
The GDPR only says "EU citizens" Doesn't mention if that means you have to be in the EU or not currently.
yes, git is. But issues, discussions, wikis are not.

Authentication of who can comment on issue and who can see them, the user identity service is not decentralized.

That's the main problem with git. And that's why github exists.

I think github could try transform into a namespace and identity service.
Elon Musk is being sued for market manipulation.
There was no shortage of British politicians and cabinet members who were unapologetic imperialists or who were responsible for fatal blunders. There was a shortage of men who had the foresight to understand the Nazi threat and the power and will to oppose it. Churchill is unexceptional in his evil but extremely exceptional in his heroism.

Much of the horror at Churchill, in isolation, is completely normal and justified. The thing is, there isn’t really any single heroic historical figure who is uncomplicatedly heroic. Abraham Lincoln was a de facto dictator who violated the Constitution in order to save it, Nelson Mandela was a terrorist who killed people and refused to renounce violence, FDR interned the Japanese and had plenty of his own dictatorial impulses, Martin Luther King was a serial philanderer who plagiarized his doctoral thesis, Washington and Jefferson owned slaves, Isaac Newton was a complete asshole with eccentric and fanatical religious views, and so forth.

So yeah, true, let’s acknowledge the awful things about Churchill. But let’s not over exaggerate them or use them to draw a moral equivalency with Adolf fucking Hitler.
Yes, but what damage has it done to the brand? They're now a manufacturer of quick family cars, not purely sports cars. Now they are in the same class with Maserati and Lexus for coolness, not McLaren and Lamborghini.

This isn't something that can be bought back. "I drive a Porsche" doesn't have the same implications it once did.
I'd be curious to know how much information was stolen on people who aren't even FB users.
Rude Customer
In Macy's, There is a Hispanic woman in a lavender shirt with black hair in a ponytail who is being extremely rude towards people, giving them attitude. Fuck that rude woman.
Private aviation company JetSetGo starts urbanair transport service ‘SkyShuttle’
That is a good point, public transit is not immune to ignoring future costs. However-

The real doom is when people abandon the town or city because property taxes have to be hiked dramatically to pay for the bill come due. This drives people to leave, which drives taxes higher, which drives people to leave... This kills the city.

New York & the train system there has big problems. But because there are so many people paying into it, nobody is leaving New York over the cost of fixing it. It is troubled but not failed.

ST's core raison d'être is abandoned, decaying suburban sprawl. Growing up in Silicon Valley, I didn't really get ST until I was walking through vast, crumbling suburbs in the midwest.
Bitcoin's inflation rate is higher than the USD though?

Bitcoin inflation rate per annum: 3.87%
USD Current inflation rate for the United States is

2.7%.

Early in Bitcoin history, by design Bitcoin went though a period of hyperinflation where Satoshi and a few users acquired most of the coins in circulation.

Aprox 4.11% of Bitcoin users (addresses) control 96.53% of all bitcoins in circulation.

Also there's a chance that something will make Bitcoin obsolete in the near future - immediately destroying the trade value of Bitcoin, either a new cryptocurrency, a quantum computer or cryptographic breakthrough that would allow theft of BTC private keys or more predictably a bug like what recently happened in the main Bitcoin core wallet client software which allowed a user to inflate the supply of Bitcoins past 21 million and mint more BTC for free.

So if you were truly concerned about long term stability - gold or tangible functional assets would be much safer than software based pet rocks.

https://www.livebitcoinnews.com/cve-2018-17144-the-aftermath...

The obvious worst part of this bug was the inflation
exploit. An attack could create new bitcoins at will,
exceeding the 21 million hard cap limit that is
currently in place. This would absolutely destroy
confidence in not only Bitcoin, but every
cryptocurrency.

In addition, a miner could crash every single node they
are connected to by producing a block with an invalid
transaction in it. Miners are will go out of their way
to connect to as many other mining nodes as possible, so
they receive notifications of blocks faster.

Imagine you’re a miner, hashing away at block #1000.
Another miner, Jim, finds block #1001 and starts
propagating it around the network. However, you’re not
connected to Jim, so it takes an extra few seconds for
you to receive the block. During those few seconds, the
network has moved on and you’re wasting hashpower and in
turn money. You need to receive the new block before you
get started on the next one.

All the miners are highly connected, so if one is
producing client-crashing blocks, many of the larger
miners would be hit.

Quite a concerning catastrophe that has no guarantee of being avoided in the future, as any programer knows how many bugs can hide or be exploited in any code base.
It's fairly obvious in the application form itself, If I remember. They do take folks without 'traction' but there are too many applications now I feel YC find it difficult to bet blindly.

The obvious solution then would be another YC like or a sub-brand from YC that do not accept startups with existing traction, as they are just looking for a boost instead of real hand holding. I feel YC realized this and they are doing programs like startup schools to accept/help more startups.

But a long term solution IMO is there should be more YC like orgs in every country/city to really nurture and help the ecosystem. The theme of accelerators should also vary based on the location and not just try to replicate the US model. For e.g. In US, it make sense to start product companies that have global vision. While in China, or India it make sense to promote ideas to solve local challenges or B2B products that do not need the media glare that SV companies get/enjoy. Also in India and other south-east asian countries, it might make sense to accelerate companies that can provide quality outsourcing experience to small/medium product companies in the west. I am yet to see a global startup-friendly outsourcing behemoth when there is an opportunity for same.

Also I feel if a company is not accepted in a cohort, they should be given weightage in the next cohort if they are hanging around and have bettered their stats.