skysight-inc/HackerNews huggingface dataset:
Can't the required rust version be (temporarily) treated as part of firefox then, and not bother building everything else using rust with that version?
To me this sounds like he gave up on producing something with craftsmanship. It sounds like he's getting bullied by someone of lessor experience.

If the code was blainently duplicated, that's going to create problems later.
I'm excited about having the option to generate portable SPIR-V shaders from a wide range of languages (GLSL, HLSL, Julia, Rust, OCaml and others).

I understand that SPIR-V is an excellent, flexible intermediate representation... I really hope it ends up as the shader language of WebGPU.

(Apple is trying to sabotage SPIR-V and it'll be really disappointing if they succeed.)
I automated image quotes creation for social media
Hello, I'm Nicolas, I'm a 29 years old Developer from Uruguay.

As most of you already know, experts insist on using quotes in social media marketing, here are some interesting links:

Quotes are always re-shared like crazy. This is one of those things that’s almost sure to work no matter how many times you do it. Quotes never get old. The fun thing about sharing quotes is that it will get more re-shares than comments - https://www.searchenginejournal.com/boost-social-media-engagements-using-quotes/

Quotes and text-based images are a simple but effective way to boost engagement quickly with your Instagram posts - https://blog.hootsuite.com/instagram-post-ideas/

Now they are some of my most shared content on every platform, not just Instagram. Easy to make, effective and attractive, you should add them to your content regularly - https://imninjas.com/blog/social-media/create-awesome-eye-catching-instagram-content/

Humorous, inspiring or motivational quotes always perform well - https://www.forbes.com/sites/jaysondemers/2014/06/25/100-killer-ideas-for-your-social-media-content/

That gave me the idea to create an app to generate beautiful quotes images customized with your brand logo and link. The result is ViralQuotes (https://viralquotesonline.com). Within 5 minutes you can generate a package of up to 500 image quotes, with your logo and link to your site/product/brand.

It is a web app ideal for social marketing automation, a social media content generator. You can choose from a wide range of topics and enjoy an original set of custom quotes, with backgrounds chosen from a quality set of royalty-free images.

I appreciate it if someone let me know where it could be a great place to show this app because I think is useful but for a very specific niche.

Also, any feedback would be great, suggestions, critics, ideas, etc.

Thanks!
Are you saying that they're repeating themselves?
You may be overthinking it with the power dynamics theory. It may only be because they're making it comfy for the "young nerdy" demographics, who have the highest yield for the business.
There are plenty of people with real skills in C working in embedded. It might even be easier to find C than C++ developers.
Very interesting claims, please share the citations.
"presumably small security patch"

The security patch is actually quite severe and has been reported to be in active use.

https://www.mozilla.org/en-US/security/advisories/mfsa2020-0...

https://www.cisecurity.org/advisory/vulnerability-in-mozilla...
The Twilio 2FA API actually allows you to generate secrets and QR codes for generic authenticator applications now. Check out the documentation here: https://www.twilio.com/docs/authy/api/one-time-passwords#oth...
> I keep telling the IT people at my hospital to stop using SMS 2-factor and they blow me off and treat me like an idiot.

Well... yeah. Nobody is sim swapping hospital staff.

It’s not great, but this isn’t a real threat they’re facing.
If you allow fallback to SMS instead of TOTP, your solution may be more secure than no 2FA, but it’s no more secure than SMS either.
Can you elaborate? This doesn't sound right to me but I don't know much about this.
That kind of attitude had rather tough consequences for the Russian royals, a couple of decades later.

Thanks for sharing this. I had not heard of it.
Reye's Syndrome is for Aspirin, not Tylenol.
I didn't mean to make this about transgender medicine. The evidence is pretty strong that hormone treatment improves wellbeing for transgender patients[1], and of course, they can always stop it if it doesn't. The fact that very few do is a good indicator of satisfaction overall. There is a very strong bias towards safety in the practice of transgender medicine.

I can also personally attest that transgender medicine has vastly improved my life. The changes in appearance reduce awkward interactions (I presented female almost always even before transitioning). The mental changes have all been positive and left me feeling much more in control of myself and my life.

There is a lot more science to be done and things to be discovered especially when it comes to brain impacts. Transgender medicine is a new field where there is much to be discovered. It's still a super important thing I'm glad exists.

In any case, I was using it as an example where these brain interactions become super visible and complicated, not trying to debate it directly.

[1] (simply the first thing I found googling) https://link.springer.com/article/10.1007/s11136-006-0002-3
I'm not offended by words. I was just talking about other people. Some people are offended by words, some are apparently offended by others being offended.
They are computationally expensive. scrypt and Argon2 also depend on RAM access for their slowness, since that's much harder to parallelize (compute is easier to scale than RAM bandwidth). When your CPU can do hyperthreading that property might help recover some of that execution time.

It is a good DOS target, you should definitely rate limit logins to mitigate that. Other strategies are requiring captchas for login or letting the client execute the hash function and just doing a simple (fixed time) comparison on the server side.
Rust or any procedural language seems not to be the most apt lang to do a first implementation / rewrite of a patch theory. Patches themselves have already been generalized to paths using HOTT ref: https://www.cs.cmu.edu/~rwh/papers/htpt/paper.pdf. The takeaway from https://arxiv.org/abs/1311.3903 is the use of commutation to allow for push out while the HOT ref discusses pseudocommutation regarding merges. See the footnote about commutation being inaccurate term regarding darts model. With the addition of ojo "ghost" deletes and pseudo edges, a formal implementation should provide a non-exponential model/algorithm amenable for optimization.
Full quote:

> Vulkan is a crap. I want to ask Vulkan people, if you want that much performance, why don't you write in assembly? Probably less than 1% of the programmers who can use OpenGL will be able to use Vulkan. Absolutely not for education. Vulkan is a crap.

Dr. Soji Yamakawa (aka 'CaptainYS'), mechanical engineering research scientist working for Carnegie Mellon University[0], has a wide list of publications, some of them listed on his website.[1]

Most known project of his programming skills is free cross-platform flight simulator YSFlight[2], that use own open-source GUI lib[3] built on top of OpenGL and DirectX.

He also keep few classes on learning computer graphics and took part in DemoSplash demo parties (winner of 2017, 2018 and 2019).[4,5,6]

[0] https://twitter.com/cmu_mech/status/784391682343182340

[1] http://ysflight.in.coocan.jp/publication/publication.html

[2] https://ysflight.org

[3] https://github.com/captainys/public

[4] http://www.demosplash.org/2017/compo_entries/results.txt

[5] http://www.demosplash.org/2018/compo_entries/results.txt

[6] http://www.demosplash.org/2019/compo_entries/results.txt
I've never really understood the difference between a KDF, hashing function, password hashing function, though it's relevant to know when writing reports (I work for a security company). We recommend Argon2/scrypt/bcrypt for password storage of course, but we call them KDFs and I'm not sure if it's correct. From my understanding, a KDF can be fast, but a PBKDF must be slow. Could you elaborate or do you know a good resource (short of a whole book on low level crypto details)?
I meant small as in code size.

In a stable branch you want the size of changes to be small and targeted despite how severe the issue is. You don't want to take on new bugs from patches that aren't related to issues you want to see fixed.
It just says "Firefox and Firefox ESR" are affected... no versions published there https://www.mozilla.org/en-US/security/advisories/mfsa2020-0...

I assume some research into IonJIT will be done to see where it was introduced but by the sounds of what it does it could have been long ago.
Simple answer: `opkg install luci-app-nlbwmon` and you get instant bandwidth stats in the LuCI web interface.

Otherwise there is documentation on all other possible tools you can use:

https://openwrt.org/docs/guide-user/services/network_monitor...
https://openwrt.org/docs/guide-user/network/wan/wwan/bandwit...
PG has explicitly defended Elon Musk from criticism and what he considers "haters" before. It's who I thought he had in mind when I read his piece.

https://mobile.twitter.com/paulg/status/1122987659079618563?...

Of course, when all these substantive points were raised to him on Twitter, he slinked off and didn't respond to a single one. PG also seemed to be implying that Tesla/Musk criticism was "too dedicated" or "too committed" to be organic, lending support to Musk's tactic of deflecting all criticism as oil industry funded propaganda.
You may be interested in http://canonical.org/~kragen/memory-models then. I don't think it's necessarily a mistake but it's definitely taken for granted far too much.
But as I said towards the end of the previous comment, if you deem the threat to your users great enough that targeted SMS attacks are a problem, you can turn off that fallback.
I don't know a reason for why they are acceptable. AES256 is considered quantum-proof, but there exists another theoretical quantum computer design which seems to raise the bar again. I don't know if there exists a theoretical limit for how powerful quantum computers can get.
I don't remember where I read or heard this, but if you try to download all the source code at once, they will probably block your account
Those are the decoupling capacitors under the CPU socket. A very odd choice of photograph for this article, but perhaps an ironic hint that we need programmers who also know more about the hardware...
> Compared to git, it relies on patches rather than a branch approach.

Is this even relevant at all? I mean, in the user's POV the role of a VCS is to CRUD changesets and branches. As long as the user can commit their changesets and audit the DAG of past commits, who cares how the system is implemented under the hood?
Code is not clean : code is cleanable. What is clean today might not be clean tomorrow (Robert C. Martin, author of the book "Clean Code")

Trying to evaluate code cleanliness in isolation is a waste of time ; as it strongly depends on the way your requirements evolve (but it's not subjective). You only need abstraction points at the frontiers between parts of your requirements that change at different times.

Duplication is better than a wrong abstraction (Sandi Metz, author of Practical Object Oriented Design in Ruby).

Trying to religiously factorize every structural similarity you can find, for the sake of the almighty DRY principle, without taking into account how business requirements evolve, is counterproductive.
seems like you deserve more of a cut than that.
> We expect esr releases will stay on the same minimum Rust version, so backporting security fixes may require Rust compatibility work too.

The policy suggests that ESR will update infrequently to the latest Rust-stable at each major .0 release, so as long as 6.7-stable and ESR end up having the same Rust stable version, that will work out. That’s a coincidence-based success, not a certain one, though.
Too many concurrent problems of this sort for it to be just a big-co problem.
Seattle Police Chief Carmen Best said in a statement that she agrees with the watchdog's findings and suspended the officer for six days without pay, according to a police statement Thursday.

Six days without pay for taking a human life. Here's a radical proposal: why not hang him? Or imprison him for decades? Or even just fire him? Or do literally anything? That's not even a slap on the wrist, that's a vacation.

Why is it that cops can get away with everything under the sun?

There are so many instances of this it's ridiculous.

If the United States doesn't see reform for these thugs, it seems impossible that a dramatic inversion of the current status quo won't happen.
Ah, my mistake :) That makes sense!
Hm. For me this is a question about interface design (vs. implementation). IMHO Unix programming philosophy is a lighthouse how to solve this commendable. In an ideal world you should have to upgrade base program and dependent libraries only if their interfaces have changed.

EDIT: And of course for security reasons - but then you only upgrade the affected player and not huge parts of your installed base. What I want to say - this is all about the ruling design philosophy.
Because responding to climate change (or not), will necessarily entail a political process.
No, it really really matters. Small things add up, when you're forced to do them multiple times every day.
Good generics can be really helpful here.

Can't be specific without knowing the exact helper function but I find sitting down with a cuppa (away from the computer) and planning an interface (If it's C++) that accepts (say) a policy class with a default and a callable object ("Functor") very helpful.

Sometimes it can't be done but it's better to have a bugfree building block (Macros don't count!) that can accept buggy user defined tasks than lots of repitition.
If you've never seen this message, you haven't been programming in Python for very long:

AttributeError: 'NoneType' object has no attribute 'foo'

Not to mention UnboundLocalError and cases of AttributeError that stem from trying to use attributes before they've been initialized. Some of these have slightly better ergonomics than Java’s pernicious null initialization, for example by crashing your program earlier, but the upshot is that everything you do in Java that will crash with a NullPointerException will also still crash your program in Python.

Oh, I guess except for shadowing an outer-scope variable with a local that you never initialize. That just gives you the wrong answer in Python, because there exists no local without an initialization. But it's a pretty marginal case.
The article didn’t mention if the team that wrote the dirty code had done a code review. If they did, it doesn’t mention whether the author of the article looked at the interaction between the code author(s) and the reviewer. Perhaps this was discussed and the repetitive code accepted with good reason?

When code is merged, it should be too late for further discussion. The review is done and flaws like this is debt that should be taken care of the next time someone needs to touch it.
Can you give some more details on what the design problem is here?

It seems to me that nullable references are isomorphic to having an option type with non-nullable references, but prevent accidental unchecked dereference. What are some of the difficulties that you'd expect to come up if you took an imperative language with nullable references and replaced them with options of non-nullable references?
Is there a better alternative to Firefox? Of all the browsers it seems like the "least bad" choice (above Chromium, and other proprietary browsers) and I use it, but is there something safer, simpler, and more secure?
Your comment violates the FCRA, delete it immediately.

It’s easy to make claims like this, but is it really a problem with the law if someone is making frivolous claims?
This is the one aspect of The Expanse, the tv series, that I like a lot. One day, I'd actually think their terminal system would actually be a real thing:

https://www.forbes.com/sites/kevinmurnane/2017/03/08/science...

(Unfortunately, this would probably require public infrastructure, not private, which just seems to create more walled gardens. But... I digress...)

This approach to technology is really a major difference from the expanse and a lot of other sci-fi. FTA:

> The writers and creators of The Expanse take the view that technology develops over time to serve human needs but it doesn’t do away with those needs by either wholly satisfying them or destroying the people who have them. Technology advances but the human problems remain.

In many ways, a lot of sci-fi writes focuses on technology first, people second. And _that_ often resembles "concept products" that never see the light of day.
> Liberal economists use this term the most, they usually mean large companies trying to get goodies from the state.

No, they don’t. That is neither a correct nor common use of the term.
If someone else is looking for examples too, I found those:

https://www.reddit.com/r/Zig/comments/99zlc9/exceptions_or_e...
> I know I shouldn't have any expectation of privacy in public and all that, but CCTV cameras in plain view are a different matter.

Perhaps we need to define a new right: the right to obscurity. There are places and times when you can't expect privacy but still should be able to expect that your location and actions won't be linked to your identity for all eternity.
Okay, suppose someone backporting a Rust update runs a big batch of tests and finds, say, two dozen packages with regressions.

Now what?

Spend two weeks investigating all the test failures? Backporting updates to these packages as well, all while users are patiently waiting for their Firefox to have its zero‐day fixed? Are the tests even correct? Were they failing before and nobody noticed?

And all this to only get automated tests passing. Any regressions in behavior not tested are not noticed (or more likely, noticed by users much later, requiring further investigation at that point in time to narrow down the Rust backport as the cause).

In the meantime, this packager’s work on other OpenBSD packages in -current (what most OpenBSD developers actually use day‐to‐day) completely stops.

That’s some insight into the mindset of a software packager. Non‐security backports to language runtimes are a serious maintenance burden.
This reminds me of Wayne Gretzky's phrase "Skate to where the puck is going".

A really good coder will find clever ways to implement the requirements in the most DRY fashion possible. And it will be perfect. Until the next requirement comes along. This is skating to where the puck is.

At some point you pick up the knack to know where to just leave things dumb and obvious as possible, because something inside you is shouting that there's going to be some new requirement soon that breaks the abstraction you're considering.
YAGNI is about not adding functionality until it's needed. DRYing code isn't adding functionality.
RedHat’s “streams” model will certainly do a much better job of handling this than the other distributions do today. I hope that the need for having multiple parallel versions of a dependency coexist is incorporated into the other distros, because I’ve lost a lot of sanity this past two decades to the assumption that “one installed version should be enough for anybody” on Linux and BSD servers.
This is a nonsensical argument. A word has meaning, which is why it is a word and not a sound.

If I yell insults at you, you are saying that doesn't mean anything? And if you get insulted, it is your own fault?

No, words have meaning based on a common understanding between the person saying the word and the person hearing the word. If I insult you and you understand it, it is me who did the insulting, it is not 'your problem'

You should try this argument out in court: "No, your honor... I can't be guilty of threatening to kill someone.. sure I said, 'I am going to kill you tomorrow at 5pm', but those were just words! If the person felt threatened, that is on them!"
What's reasonable is if you want to avoid using Google services (for whatever reason), then you do not need to be fanatical about it. Move off gradually, one service at a time, and keep using some Google services, if you really must - why not?
The officer got six days of vacation and name suppression. Lucky guy; Carmen Ortiz didn't get either.
I was saying what the numbers would change to at the same level of technological progression, but with policy changing to make the work more evenly distributed.

Obviously the long-term goal is ever-more automation. But current economic policy is based around creating full full-time employment, which is fundamentally at-odds with ever-less needing to be done due to automation. Hence the proliferation of anti-productive "bullshit jobs" where people ultimately aren't ultimately helping to produce anything (eg the entire medical billing system), but still need to cling on and go through the motions so they can eat.
There are a fair few exceptions though:

https://en.wikipedia.org/wiki/Henry_Molaison#See_also

Mind, these are the 'famous' people.

My google-fu isn't super great here, so I've not sources, but I know of a few cases of French postmen that 'suffered' from hydranencephaly, were married, with many children, and otherwise 'normal'. It's not super uncommon that people with otherwise good balance but who cannot ride a bike also 'suffer' from a lack of a cerebellum.

The wiki article on hydranencephaly is SUPER wild. Take a look at that picture of that baby! Though it is typically lethal, there are cases where those affected survive into adulthood

https://en.wikipedia.org/wiki/Hydranencephaly
I use vivaldi. It provides a lot of customization for my taste unlike others.

My biggest problem with most browsers is tied to how they handle tab management and lacks basic features that should be there without installing an extension.

Example - stacking, auto closing, filter, finder etc. Not hiding tabs after certain number of them.

edit: more info here at https://vivaldi.com/features/tab-management/
Controversial:

Is this the same disease that leads to the love of Haskell by those particular zealots (more not all Haskell programmers) who write yet another monad tutorial to spread the word of the one truth without writing any useful programs? Seeing "ah this is sequencing, so i can abstract that..." And so on. Haskell gets you to higher and higher levels of abstraction in your programming but doesn't seem to guarantee you'll get a useful program at the end of it.

(Yes there are useful Haskell programs, obviously. Just less of them than monad tutorials by at least an order of magnitude)
In full fairness, was it Darcs version 0.x? Pijul has never made any claim to be stable yet (but we're getting there).
So cops shouldn’t be surprised when people assume everything they say is a lie. Perhaps they should consider the secondary effects of this kind of policy...
> Does anyone know a modern (well maintained I mean really) equivalent though? I played around with this a long time ago and it is incredibly efficient.

https://diesel.rs ? Maybe https://tql.antoyo.xyz/ if you care more about ease of use.
It seems likely the OpenBSD would consider such a patch if it were presented to them, but they might also reject it due to ideals they hold that outsiders can’t predict.
Fucks is Germanic surname. It isn't the most common, but it isn't rare either. Sometimes it is spelt "Fuchs", "Fuks", or "Fux".