skysight-inc/HackerNews huggingface dataset:
> already working in dat (https://datprotocol.github.io/how-dat-works)

I just looked over the doc at https://datprotocol.github.io/how-dat-works, particularly the section on the tree hash. It looks pretty reasonable, and definitely similar to BLAKE3.

I think one practical downside of the Dat approach is that root finalization is always done as a separate hashing step. So for example, if I hash the short string "hello world", I have to compute one chunk hash and then one root hash, for a total of two calls to the compression function. Compare that to BLAKE3, which will only do a single compression there, by setting both the chunk flags and the root flag for that one block. This difference is probably totally negligible for Dat's intended use case, where network round trip time is going to completely dwarf hashing time for small inputs. But for a general-purpose hash function you don't want to cut your small input performance in half.

A bigger philosophical difference is that Dat doesn't specify a particular chunk size. Again this makes sense for their use case, since you might want to experiment with fancy things like Rabin fingerprinting. Looks like they discuss that here: https://stackoverflow.com/a/51604110/823869. But for a cryptographic hash, it's important that every file has exactly one hash, and a fixed chunk size is required. Another upside of a fixed chunk size is that you really cut down on metadata; the 8-byte length at the front of an encoding or a slice determines the structure of the entire tree.
Here's the actual declaration from PACER, which has some interesting details:

https://tmp.tonyb.xyz/lamb-decl-pacer.pdf
He said he is going to move it to private in his [post mortem](https://github.com/actix/actix-web)
Electrification will involve entirely new train sets, so it’ll go a very long ways towards fixing things. Electrified engines aren’t going to be pulling the older cars.
All of this is second hand, where are the mean comments "making" this person quit their own project?

Were they actual personal attacks, or just criticism of the code?

If you can't accept legitimate criticism of your work, that shows a real lack of maturity.

(The article didn't give concrete examples, so I don't know which is the case here.)
do we even have proof its due to climate crisis. eucalyptus is highly flammable, tourism increases, im pretty sure fires can start from some foil paper on the floor in those regions. also like the aboriginal australian use to do, you need to clean the bush and forests. we should focus our efforts onto that rather than talking about a philosophical "climate crisis" that wipes out concrete efforts that governements can lead to protect their forests.
The first one looks like pictures of my eye taken after my doctor scans it with a light (I suppose that's just an angiogram you mentioned later). Those rasters were my favorite, and I love the artful clarity of complexity you achieved. I came away appreciating emergence a bit more. Interesting how the complexity resisted the contrivance during attempts to press it into shapes! (subscribed to your newsletter)
Most no-tip orders don't result in a cash tip, but some do. I'd say 1 in 5 no-tippers end up tipping in cash. People who use these apps aren't exactly the greatest customers in the world.

It's only a bad strategy if most or all drivers pass on your orders. Some drivers take these offers in hope for cash. I chose to stop taking those offers because I found most people don't end up tipping me in cash. It was more profitable to drive 20 - 30 minutes to a hot spot or a rich neighborhood where I knew I would get worthwhile offers. (and also not end up in the hood!)
1. I find the assumption that Rust code is safe a bit overly optimistic. If you're writing network-facing code, security is always an issue to some extent, even if mitigated by language guard-rails.

2. The actix framework author supposedly did the following things at once:

2.1 Wrote code somewhat carelessly
2.2 Wrote and maintained his code alone
2.3 Claimed his code was "safe" - in that mythical complete sense I mentioned above

this combination is a recipe for disaster, and he was warned (albeit in a possibly-non-friendly-way). Thus, while the public outroar is probably excessive - security bugs do happen - he is to some extent getting what's coming to him.

Caveat: I'm a C++ person and am not familiar with the Rust ecosystem.
I tried this once. I can do it easily with natural language but it's much harder to do with code (even code you're familiar with). I think this is because so much of writing new code is back-and-forth:

start writing loop, realize I need another variable, go back and initialize the variable, back to where I was, oh this should be brought out into a function, ah this function should is now getting quite large I need to split it, back to where I was, oh that should be an array not a map etc.

I like Visual Studio's 'jump back to where I was' (Ctrl+-) feature because it leaves a trail of bread crumbs across the many files I'm working in of what I've been doing and what's left to be done to implement feature x.
Bloody hell, this document is great, it's like reading Ross Anderson. Exactly the type of security advice we need to get out to IT people.
The community's response might be valid if it were limited to that. But, quoting TFA, they went beyond that.

"It’s extra nasty this time. Some people go far, far, far over the line."

When someone polite says this, I picture some of the nastier attacks on the internet - doxxing, death threats, and swatting.
BlackRock and Vanguard are supposed to be the places where people can put their money into low-overhead index funds that more or less track the market.

It's fine if they want to create new products that exclude certain types of businesses, to give investors more choices.

But what I don't like is them turning this gigantic pool of money into a spear to jab businesses with their pet political opinions. That's not the role investors entrust their money with them for - they're expected to be more of a passthrough type of management.

They've previously done this same thing with gun manufacturers and retailers, who are doing very well, so you can't make the argument some in this thread are making with fossil fuels being a dead end compared to an alternative (renewables).

So whose next on their woke chopping block? Monsanto for killing the bees? Boeing, Raytheon, et al for supporting the military? Facebook, Twitter, et al for the harmful effects of social media? All the software companies like GitHub that support ICE or the next distasteful federal agency? Like they did with guns, divestment in any company you don't like can be couched in deep concerns over "risk."

I think there's a great opportunity here for someone to start a fund that gets back to the basics of passive index funds, instead of chasing woke asspats like the activist board of BlackRock and Vanguard. I'd certainly move my money.
CA Bill could impose higher taxes on companies with large CEO-worker pay gaps
not a founder,
but I would start with building some peace of mind for yourself -- Journaling, mindfulness, meditation, prayer or similar is a great place to start and most high-productivity folks actually draw a connection between this sort of focus and both increased productivity and lower stress. In your one-man-band phase, this is super important for you to constantly improve.

A less popular angle is to cut out alcohol. There are huge gains to be made in focus and rest without it.

a good reference for this is The Productivity Project available in audio ( I listened to it myself )

https://alifeofproductivity.com/the-productivity-project/
Why is the maintainer responsible for that? They're just another dev who wrote something that became popular.

It's almost like watching lottery winners having their lives ruined.
In his afterlife, JRR Tolkien lives in middle earth as Tom.
>If it doesn't meet your standards, don't use it.

>Alternatively, go fork yourself.

I think this could be the new template for Open Source Author to include in their OS work description should they choose to.
Such a program would certainly not be connecting to any network itself.
Limiting the threads as somebody elses said. For chromium no one really builds it on a laptop, everyone in my team used a build server or a 32 core monster desktop.
especially pyrophytic ones like au
This is just pure rent-seeking by "Ethos Capital".
I used to have this mental model for my (few, meager) open source projects: "I'm making something really cool in my back yard. You can come help when I'm home."

Eventually it's mutated into, "I'm making something really cool in the local park. I'll be there on weekends!"

I had to bake in the perception of not "owning" my creation because yeah, at some point it needs to grow well beyond what I had the time/energy/capability for. I'm also very human, and very insecure about my competencies, and as the youngest of three brothers, am defensive by nature.

Now practically speaking, how do you accomplish that in the open source community? I wish I knew.
>Forcing oneself to interact for 30 minutes a day is not feasible. Even if the benefits were are as palpable as actual exercise.

This makes no sense. People exercise for 30 minutes a day, or read, or clean, or play video games, or watch TV, or tend to a garden, or do yoga.

Why are all these feasible but exercising your brain is not?
Haha - also a dod contractor, and sometimes wonder whether I'm the insane one who can't handle the wild west behavior of HN people surrounding npm packages...
Reporting bugs is annoying?

I want people to point out bugs in my code, so both my code and me as a developer can improve.
I actually agree with you in a general sense, but our own opinions don't really matter much. What matters is the opinions in the aggregate.

I wish that it wasn't perceived as such, but the reality is that it is. Ignore that at your own peril.
> Also, spell-check telling you there's an error isn't the same as automatically fixing the errors and hiding that there was ever an issue... so I think the right click/see list of likely words / pick one is still a learning process.

Here in Quebec we got a spellcheck that I sadly only learned about after high school (though it still helped me so much) called Antidote. They not only tell you what's wrong, but also why it's wrong and trick to avoid that mistake. It's in French though, they do have an English version, but I'm not sure if it's as good. It's spell checking is also much better than the one from Word (though again, French may be the issue here)
> and just because someone has the time to write a patch doesn't mean they have the desire or time to run a project

But at the same time, why should the original author do it? No one is paying for his or hers time.
Well, if coal-addicted Australia can decarbonize, then surely anyone can.
Yeah, I agree. “It’s all reddit’s fault” is not helpful at all and simply wrong from reading that thread.
If I was the maintainer and someone offered a patch that didn't alter the properties of my code, but improved it, I'd be more then glad to accept it.

Unnecessary drama because of inflated egos.
The project is being done by MSR in cooperation with Imperial College (where Pony came from), and one of the Pony author’s works at MSR now, so I’m guessing this is by many of the people who worked on Pony.
"Did jesus die for Klingons?" can be answered the way that Mormons answer the question for Americans.

That is, Quetzalcoatl came to the middle east to offer the good word.

(I always tell Mormon missionaries about Quetzalcoatl and they haven't heard of him, but the Quetzalcoatl cult did start around the same time as when Jesus came +/- 100 years or so.)
> It was never Nikolay's job to vet actix-web for you

Perhaps, but if he claimed that it _was_ vetted, then he took on some responsibility for it (which he probably should not have).

Also, the blog post article claims, that you are never supposed to use "unsafe" code without having vetted it. Honestly, I doubt that very much, but if it's true than that's some responsibility taken too.
He says that he might do that, depending on how the next couple of days go. Regardless, it's not gone yet.
>Do you know how to catch a ball if you don't know the math but still can catch it?

I posited this years ago and the conclusion is what we call "math" is the linguistic expression of what is already intuitive to us.

The other example I used was a mother cat will seek out a stray kitten...but how can she possibly count & keep track of the number of kittens she should have? The answers are at once obvious but deceptively difficult to put into words.
The above was from personal experience and observation from having been a part of many online communities -- pre-dating reddit -- in all ways including: here-and-there member, first-hand maintainer and manager, and antisocial member causing a ruckus.

Armchair psychology? No, I've made many friends and acquaintances, both online and in real life. The ones that bubble around posting online heavily, have developed antisocial tendencies that were reinforced through social exclusion. A self-fulfilling prophecy. I know this, because I know those people well and because I was there at one point in my life as well.

Neither is it condescension. Perhaps I may have been in-exact and may have offended some that do post online very regularly, but there must be a distinction between what they consider "regularly" and what I consider "heavily." Heavily, in my observation, is someone that puts aside a significant amount of time, usually involuntarily, to do nothing but interact with online communities for the sole purpose of social interaction. No value judgements were made either, but those characteristics are common among the aforementioned group.

I won't address your hypothesis, because I'm not here to argue.
I really want to like Rust. Every time I try to use Rust on a project, I end up down a rabbit hole of internet arguments and unnecessary drama. When I finally give up on Rust, I find I can accomplish the same task in a fraction of the time with a more mature language. At this point, I think Rust is best reserved for very narrow use cases that can be shown to fit neatly within Rust's current ecosystem before coding begins.

Rust is a macrocosm of a phenomenon I've noticed in my own career: My productivity is inversely proportional to how dogmatically "correct" I'm trying to be with my implementation. The Rust community embodies many of the negative aspects of perfectionism that tend to stall real world progress. That perfectionism doesn't necessarily carry over to your code, but I find myself wondering if I'm doing things "the right way" far more in Rust than other languages.

Some growing pains are normal for any community. I really hope the Rust community can settle into a healthy environment. Until then, I'll reserve Rust for only smaller projects where I can afford to bail and rewrite in another language if it starts to spiral in complexity.
PSharp: A framework for rapid development of reliable asynchronous software
When I first started getting into Arduino type systems, I was concerned about the limited number of inputs. After studying other designs, I saw a simple method of making each pin capable of accepting multiple inputs. Each input had a different resistor attached so that the voltage from each input/button was unique on that pin. Very simple/basic solution, but still creatively done nonetheless.
It certainly can, either by detecting the sentence structure, or even more simply, by tagging them all as warning. You then go over them one by one and it can remind you of the difference and ask you whether you used the right one.
The Key to Building an Idea Seems to Be Blind Faith
What's interesting is that if you think about it long enough, you'll realize that the vast majority of words you use, whether in speech or writing, are purely there for social reasons.

Imagine asking your boss out for lunch. You might say something like "Hi [boss], I was wondering if we could have lunch today. Let me know if you are busy."

Now imagine asking your friend out for lunch. You could probably get away with just saying "lunch?"

Machines can, and should, do the same thing. Building socially-determined speech patterns into bots is awkward and a waste of time, and even if people don't consciously know that, they can feel it.
I know it's hard to make the time, but try to make some time for physical activities (hiking, swimming, anything cardio) and some meditation/breathing exercises/yoga to help get your nervous system out of it's flight/fight state. You need some balance!
The article was not about that, this is not about vetting anything.

The problem was that PRs which would have fixed security issues where not accpeted.

Do I expected perfect code from maintainers or a answer the next day? No, never

Do I think maintainers/creators should merge prs in a timely manner, or ask for help if it get's too much? Yes, otherwise you have multiple forks and the project is not usable anymore.
SIP is only a speakable horror when you have RTP payload types in common, note. (-:
Not every problem can be solved by new tech.

But… are there ways forking could be made less aggressive (perhaps easy re-joining, community-based PR review and testing)? I remember this was a huge deal in the NodeJS community a few years back—it took a hostile fork to get the conservatives and progressives to agree on a way forward together.
I have been voting in GA since 2008 and there hasn't been a paper trail since at least then. The voting systems they still use today were purchased and put into service in, I believe, 2002. There is literally no reason not to also have a paper trail.

I have no hard data, and this is from 2017/2018, but it is very sketchy when the secretary of state, the office which oversees elections in GA, runs for governor, doesn't resign ahead of time, doesn't allow any investigations into the electronic voting systems, doesn't push forward any paper trail requirements, and subsequently wins the election for governor. Everything Kemp did and didn't do was suspect as it relates to elections.

I have zero faith in GA election results. And until the State moves off of these electronic systems and/or installs a paper trail, and brings a sense of integrity back into the election system, I will continue to feel the elections in GA are without integrity and potentially illegitimate, no matter who wins in any given election. This is outside of any political affiliation. This is the core of our country not being properly governed and protected.

EDIT>> After some research, it looks as if GA is getting a paper trail after a court order required the state to move off the previous electronic system. Now it looks like they're installing BMDs which can be verified by the voter prior to scanning to commit their vote. Of course, there are plenty of articles relating to how hackable BMDs are as well.
If you change slightly the economic assumption and go from a completely competitive labor market (where workers get paid the marginal revenue productivity) to a monopsony labor market (there is only one employer), then the minimum wage can increase employment and wages. https://open.lib.umn.edu/principleseconomics/chapter/14-2-mo...

A monopsony labor market is highly unlikely to happen, but something similar can be said of a highly competitive labor market.
Isn't that exactly what happened?

This article is someone who did that research on multiple Rust HTTP clients and reported what they found:

https://medium.com/@shnatsel/smoke-testing-rust-http-clients...

Which I believe is what kicked off the events leading to Klabnik's blog post?
You cannot get the full context from a single reddit thread; as I mentioned in the post, this situation is the product of multiple events. You'd at least need the posts from all of them, let alone that this is only one of the posts from this situation on reddit in the last day.
Every flat tax is fraught with issues. Now a huge number of people who can barely afford transportation simply can't anymore. So much has been spent subsidizing roads and by proxy suburbs over 70 years, and any plan will have to involve helping people trapped by those ciecumstances, or they will overturn those plans democratically.

In short, some people can afford to pay for climate change fixes, and some can't. Any solution will simply have to be progressive and have a fair, equal burden on everyone.
Does that have to do more with the popularity of skiing?

The resorts in Colorado get big dumps and then two days later the places are totally skied off with the same "icy moguls." It's because so many people ski powder days. It doesn't take long for the snow quality to degrade, even on a powder day.
That doesn't mean it's wrong to criticize his choices, so long as it's done without being insulting.
Also a form of marketing...
One must also consider the typical quality of a PR - that is, lacking in many fundamental ways. Missing documentation, missing tests, doesn't match existing style, and sometimes just plain incorrect.

At some point, a flood of poor PRs can be worse than a flood of angry bug reports. The cost of validating and cleaning up a PR is significantly higher than closing a bug.
This should change though. That's the correct course of action if a maintainer won't mainline what you want them to. Or is absent altogether.
What are forever chemicals? And should you be concerned?
The new standard in on-premises team collaboration: Nextcloud Hub
That makes sense. I would still argue that Google back in the day when it only had 30M queries/day (like DDG has today) was no worse than DDG today, and that is the only fair comparison. Increased popularity together with influx of advertising money caused it to adopt product features and policies that allowed those advertisers to convert better, and make more money.

So basically what you are saying is "I trust that Weinberg & co are immune to that kind of pressure" or that their primary motives are altruistic in nature and will always stay such.

For me personally that is a hard sell. The elephant in the room is advertising based business models for search engines, and any company adopting it will be tempted to follow the path of Google if such opportunity is presented to it.
Oh that's not new and expected that they would read your data, like gmail scans your mails, cloud drives scan your non-encrypted files, etc.

While I'm at it, let's spread the good word.

I use Signal personally, it's really convenient enough that I can convince most people to use it and then they usually prefer it to other chat apps (you can customize colors, send docs securely, it's simple and easy, that's it!)

I actually don't even mention the privacy usually (most people don't care, it's noise to them); the simple fact that it does SMS too and is much nicer than stock apps for this makes it convenient: it's not a new app, it's a better SMS replacement that also does chat a-la messenger/whatsapp/etc.

But yes, it's also recommended by Snowden and most security experts if you care about your security and privacy. (just be careful with SMS, these remain unsecure as ever)
I am replying to a comment citing legal liability language from a license?
Help me out here is actix-web some sort of software that is integral to Rust?

If not ... I get the idea he wasn't really welcoming of the changes but at the same time. It's his code man.

I came from the world of networking and etc and the world of programming has a great deal of personal preferences / hypothetical problems / "we don't do that at my workplace" stuff pushed under the guise of technically correct ... sort of technical bullying.

Under that sometimes there's little room for mistakes / other points of view, other working styles, and etc... and it's really horrible.
I'm worried about the nature of scientific inquiry under those circumstances, but yes, I have witnessed the same behaviors in my work--innovation happens when the people standing in the way retire or get new jobs and are out of the way. Then necessary changes happen. Watched it many, many times.