skysight-inc/HackerNews huggingface dataset:
There should only be one Manhattan style project now: figure out how to download consciousness into a machine. Besides conferring immorality, this would also make interstellar travel time scales irrelevant.
The Dangers of Using a VPN on Home Computers for Work and What to Do Instead
I think there are three things that combine to cause the underlying problem:

1. Open source creators own the package and they owe you nothing. Most (all?) of the major package repositories follow this model.

2. There are very few ways to officially fix a major dependency if the creator(s) take a powder beyond cajoling or forking and attempting to maintain it yourself.

3. Many people are using VERY complex and important packages that, frankly, they may not actually be able to maintain themselves. I fall into this category for some packages that I use and I'm sure most people do, especially on small projects.

So, you are left with hoping the OS creator stays on top of things or cajoling.

Once cajoling fails, and you are in a bind, a bind that may threaten your job and career; things get ugly. It's not right, but it's human nature and it's predictable.

I'm identifying the problem, I really don't have a solution.
Although the claims seem reasonable, the dataset is fairy small, 200 data points. It would be great if they continued to build the data, and even better if they opened it up.
Was here to post something along this line. The only place in which I'm (hopefully) in contact with the Rust community is here. What do I see all the time?

- "rewrite it in Rust" kind of posts on a lot of threads

- upvoting Rust mildly or not interesting projects just because there are written in Rust

- down voting every comment that even slightly criticize Rust (this comment will be gray when you'll read it) or remind that code safety exists in VM language for decades
Its not just you.
Agreed. I think there is quite a lot of entitlement on the internet and as Klabnik pointed out: on reddit. And while it's definitely a maintainer's responsibility to make their code serve the interest of its users to the best of their ability, fundamental disagreement should result in forks, not vitriol.

It's moments like this that I reflect on the past and the public and virtual forums I have participated in... and how my own attitude shifts in favor of cooperation when I must couple my face with my words. And I wonder if others feel the same.
Wrong question. You're being paid to work (and earn money for the bank), not work on ad hoc personal projects.

You should go to your supervisor and tell them you either need more work, or would like to establish formal career growth goals.

If your supervisor is not receptive to this, it's time to start looking for another job.

The above assumes you're in a professional role. If you're a teller/clerk and there just aren't customers, I'm not sure - the bank very well may want you sitting idle and available for the next customer. Of course, if that's true, you probably need to look for a new job because they're over-staffed.
Business Marketplace startup / free business submission
I'm going to be honest, one thing I wish we could leave behind as we enter the 2020s is this obsession with flat/material and minimalist design as some kind of profound one size fits all design ethos that you can build your entire professional self around.

Don't get me wrong. There are plenty of occasions where so-called minimalist layouts are perfectly appropriate. Most of the lessons at the core of it are absolutely fundamental to design. And what it replaced, the very brief period of corporate skeuomorphic design was never that great and in my opinion had much more to do with companies wanting to showoff their fancy new technology than designing anything great in its own right.

However, I despair when I think of the amount of young designers who know nothing else and can barely imagine a life without the strict framework of minimalism and its accepted practices. They will never know the feeling of going off the beaten path and discovering something cool and valuable, because your inner minimalist has long since shot down that line of thought as frivolous self-indulgence. Only minimalist self-indulgence is accepted.

I'm sure most people here can agree that the web is kind of in a sad state right now. We're using staggering amounts of man-hours to run this thing. An enormous bloated stack of technologies maintained by a horde of programmers just so that designers can spend their days meticulously handcrafting minimalist websites that pretty much look the same and do the same thing, while being far heavier than they have any reason to be.

I can appreciate the programmers who build perfectly optimized "programmer minimalist" personal websites, but at the end of the day, I think that just amounts to a lot of really nice sandcastles. How do we translate that to the real world?

I'm hoping 2020s could be a decade when people get real about moving forward. Less aping of aesthetics and technologies from the 60s and 70s. More of productive experimentation, like in the 60s and 70s.
So basically remote is better then on-site for majority of people, if applicable. We kinda knew this for at least 10 years, no?
Gentoo is just a meme spread by some 4chan /g/ board's members. Maybe you meant Arch?
It feels more like gambling than "filling in the gaps". Casinos, video game loot boxes, mobile games, etc are all based on the idea that an occasional dopamine hit will keep people interested. A good tip now and then seems like the same thing.

It's quite likely that someone working multiple jobs will be worse off doing something like Uber and Doordash part time, but they feel like they're better off because they occasionally get that dopamine hit.

I think everyone should record everything about these types of side hustles. It's quite likely that the extra miles on your car completely erodes the money you make. The IRS allows deducting $0.50/mile, which is a pretty reasonable estimate for vehicle costs. I drive an older hybrid, which I paid cash for, and my cost is still ~$0.25/mile for repairs, insurance, depreciation, and gas (gas is <$0.10/mile if you get better than 26mpg, so it's very misleading).
Creating a fork is generally not the optimal solution. Both current and future users benefit from a patch, only those that hear about it benefit from a fork.

Now, in a case like this where the maintainer won't accept patches, yes, fork and move on would have been better.
$1 says that hack originated from within the state of Georgia, perhaps routed through Russian servers and back, but domestic nonetheless
> Wouldn't an attacker be able to create an isolated network using the existing blockchain up to block X, push the difficulty in this "new" network artificially down and create the amount of required blocks much faster than the actual bitcoin network.

You would need to invest an enormous amount of hashpower to create so many blocks that the difficulty adjustment could ratchet down (and if you don't, it's an invalid blockchain period), and this expensive attack can be blocked simply by changing the witness proof to require blocks have a certain minimum hashpower on average, which will be safe since hashpower has historically only gone up, and lets you specify the total cost of unlocking for anyone, which, like PoW, is your security factor.
TrickBot Trojan Now Uses a Windows 10 UAC Bypass to Evade Detection
for USA folks, you can in each state request a paper ballot. visit your State's voting details page at heir statename.gov site to find out how to request one.
The Rust community is filled with Don Quixotes who treat maintainers of popular open source packages like they are dimwitted sidekicks.
Here is an example of an actual comment. I believe the thread is deleted now:

> "seriously? Please just stop writing Rust. You do not respect semver, you do not respect soundness, so why are you using a language predominantly based around doing these things right?"

This is what I was thinking of when I wrote "far, far over the line."
> Forking is extremely aggressive,

Is it really, though? It is more of an "agree to disagree" situation.

Just like the maintainer doesn't owe you anything, you don't owe the maintainer blind loyalty, either.
Do you think we get software like zlib and libjpeg and BLAS and linpack by people shrugging off working for the community and failing to fix bugs?

Otherwise we get dozens of half broken forks all over the place. That's no fun for anyone.

This wasn't a drive by beg. This was a patch solving real demonstrable problems and at minimum there should have been a transition plan due to basic decency.
Mind explaining in more detail the difficulties you encountered?
I know nothing about aviation, is that what pilots are supposed to do in a situation like this?
The is just a web "template". React-admin is a full featured framework with multiple data backends.
How is taking your ball and going home childish when an angry mob is after you? Seems like a rational response to me.
It means certain states like Georgia never have been democratic
the unsafe blocks were the catalyst
Something similar to the greatest trick the devil ever pulled.
> It's not like he was getting paid to work on this, was it?

That is completely beside the point. Do the Debian maintainers that were responsible for famous security slipups regarding SSH keys got paid? No. Would the backlash if they had been unwilling to fix the issues been warranted? Absolutely.

Once you are a part of people's infrastructure and these people rely on you to not be irresponsible, you can't afford to play the but-I-dont-get-paid-card. You can resign gracefully and let other people take over. If you put up a tantrum, you probably get your reputation burnt faster than a Google project gets when they suddenly pull the plug.

Open source is not some backyard game anymore. It involves companies and their commitment in form of infrastructure and participation.

Open source is like capitalism. But a project's success is measured in commitment instead of capital.
Altria-Juul Deal Is Stuck in Antitrust Review
On the consumer-dev side, more forks make discoverability much harder. It really helps when there's a canonical place to find a given piece of software. Having to follow comment threads across various platforms to find the most stable version with that feature you want is a huge pain.

Also the core dev(s) for larger projects are usually somewhat responsive, whereas devs who fork to add their one feature usually aren't signing up for that core maintainer experience when they do so.
I understand that, and understand this likely falls into the unfalsifiable category, but when everyone, even physicists, are grasping at straws, laypeople don't have many options other than to throw around random "what if" ideas. It's fun.

I doubt that hypothesis is actually true, and it may never be testable, but it's also true that a lot of things believed to be untestable eventually do become testable.
How to Get Your Game Featured on Google Play: Tips That Work in 2020
That's a good question, and I'm ashamed to say I don't know whether it's possible or not.

"Grassroots organizing", or bottom-up pressure on the government, is a thing in the US, but I don't know the mechanisms by which it acts, beyond getting people to sign petitions once in a while.

I suspect most other people in the US don't know the mechanisms either.
All the stuff that requires speed is written in a language that compiles directly to machine code while the machine learning libraries are all python based. That seems standard, no?
> As a maintainer, it is his choice which patches to accept. If you're not happy with his decisions, choose another project, fork it, or pay someone to do it for you.

Sure, but that DOES NOT mean you're immune to criticism, especially when it comes to security.

Your type of argument could otherwise be used for pretty much everything - even large corporations. It's not useful.
To start: any personal attacks against the author are unacceptable. Anyone is free to write whatever the code in Rust they like, and it is wrong to attack them about it.

But .... I think it is showing that the premise of memory safety in Rust is working. Stuff that would go unnoticed in C and C++, is being identified and called out in Rust. Does it lead to drama, personal conflicts, etc.? Maybe. But from the perspective of the potential Rust user it's a proof that it `unsafe` keyword works, leads to higher scrutiny of potentially dangerous patterns and that the culture of other Rust users takes reliability, security and safety seriously.
My thought exactly.
While the reddit swarm was probably harsh, it sounds like it was actually a shit project and it's probably good that it's dead
Hopefully someone with a clone of the project can spin off a "reactix" fork.

I don't think the negativity was necessary, that said, if it wasn't a significant impact to performance but did potentially improve safety, many of the patches should probably have been brought in.

Personally, I've been more drawn to the likes of Rocket and Yew. The former for the server because I really like the interfaces and usability. The latter, I haven't done much with, but think it's pretty cool and a relatively small starting point for a WebAssembly based UI experience, compared to say Blazor.
If anyone profits from the run, it’s the company that pulls out the clock and the timing mat. That will be a fixed fee, whether you have volunteers or not. The timing company does not care about charity, or not, they want their money to pull out the equipment. I know a few of these folks, most are one person/mom and pop operations. None that I know of are driving nice cars and raking it in.

The volunteers are to reduce other costs for what is probably at best a break-even proposition. Race directors generally aren’t rolling in cash, either. That is, unless one doesn’t provide any of those services and charges $85.
Tesla cars are accelerating without warning, prompting government scrutiny
You seem to have used the word rape repeatedly in your comment when you meant to use the word rate.
Phone calls and visits to your representatives on all levels are taken very seriously by their offices
There's a reason why personality style quizzes are so popular online - people are always trying to figure out aspects of their identity!
If a fundamental plank in rust's safety platform involves "apply the honor system to random people on the internet who swear they've vetted something", then that's a problem.
> the [psychological] profile ... is one built on abrasiveness, distrust and aggression towards authority,

Hey hey hey, "aggression towards authority" is not a psychological trait, but at most and pattern of action. Also, I disagree with your implicit maligning distrust of authority without generally distrust of others.

> ... and participate in social contract,

The claim of the existence of a "social contract" is part of the self-justification of authoritarian aspects of social structures in capitalist democracies.
What about reproduction?
They’re a user experience improvement over things like butterfly ballots (where part of user experience is ability to understand who you’re casting a vote for.)

Of course, the right solution would be paper ballots that aren’t stupid.
I actually agree. Which is why my first comment on this thread said this:

> HOWEVER (I can feel your hatred), there's a difference between motivating people to aspire to better things vs simply making them feel shitty about themselves so they'll buy your crap.

There are lots of different ways to motivate people. Lying is one of them. Making them feel bad about themselves works too. I don't support either of those approaches.

So to use your example about the gym, I strongly dislike most fitness/health advertising for the very reasons you state. If I were to run ads for that industry, I'd focus on the effort of regular everyday people. I wouldn't show impossibly perfect (and mostly photoshopped) people. I'd show people from across the whole spectrum pushing themselves, waking up early to hit the gym. I'd focus on health, not "beauty". On working out so you can have more energy, fewer health complications, greater strength, etc. I wouldn't run ads that tell you "you should work out because it's the only way you could ever look like this model over here".

But that's just me. I don't know if my approach would work, because I haven't had the opportunity to try it yet. (Not a lot of fitness brands looking for an ad agency in Northern Ontario.)
Yes software authenticators that use a security key for OTP are a good option. This is what Yubikey does with the Yubikey Authenticator. As with most security things there are tradeoffs to each approach. The pro of a software authenticator is that you can have an unlimited number of accounts, the con is that it requires the user to install an app on their phone/computer (in some cases the OTP shows up in a desktop app it may be possible for hacker to intercept). With the OTPs being generated and typed by the key itself the pro is that you don't have to install an app and login can be faster because the OTP is typed for you, no reading and typing it manually (also harder to phish). The con being you can't store unlimited accounts and since the key is typing the OTP the key has to be physically connected to a phone/computer.
I was trying to address your "There may be more context of which I'm not aware," and all I was trying to say is that nobody was making claims that somehow the author was violating some sort of license duty or whatever.
> I got married in a Southeast Asian jurisdiction where divorce rape does not exist. Going back onsite would undoubtedly mean dragging wife and kids along into a divorce-rape jurisdiction.

What is divorce rape? I googled it but the only result was urban dictionary and I don't think it matches with your comment.
Perhaps we can get at a deeper, more durable insight if we assume for a moment that most individual actors are well-intentioned, and that the described vitriol on one side and perceived stubbornness on the other is an externality of the unfortunate incentives (or lack thereof) that are parasitic on the open source community.

It's almost instinctual/natural to misjudge the popularity of any project for some false sense of security or acceptance. Just think about the numerous issues that plagued the Node community around NPM packages with large amounts of downloads and GitHub stars that turned out to be problematic.

For me the deeper insight here is that we all sort of want our cake and eat it too. Project maintainers/owners want the freedom and enjoyment of working in open source building fun and useful things without any explicit commitments, and that's fair and understandable especially without any formal compensation. And the users want to be able to have access to a growing collection of projects without having much skin in the game, i.e. paying for it.

This isn't a problem with people, this is a problem innate to open source, and the double-edged sword that it is.
> Meh, this is just the first of many to come, if Rust is to keep growing in popularity. It's on the same trajectory as Go, just a bit behind because it got usable a few years later.

If you originally meant that the Rust community is on the way of becoming less welcoming, well that works for me.
Well said- sometimes i feel that HN is basically a practice for people on how to reply to toxic emails from coworker. "I should have framed it like this"
I have some side projects that use react and I dont mind cuz they are small time and react is fun, but seeing that list of dependencies scroll on the terminal makes me extremely uneasy everytime.
This article is specifically about another level of cache between L3 and main memory becoming standard in modern PC architectures.

It has already happened in a few places not mentioned in the article, Xeon Phi with high bandwidth memory and broadwell CPUs that could embedded ram as either video memory or a level 4 cache.
Here is the client source code: https://github.com/ghbutton/iron-client
Repossessing Degrees
Of course you can criticize, but people are continuously demanding things, like "he should have labeled it as a toy project", "he should have given reasons why he didn't accept the patch", etc. And Drew is very right to say: No, he didn't have to do any of that.
Lol, this is such a low value blog post for the front page of HN. Probably the lowest ever? There's 10,000,000 articles like this out there. And I say that as a non-repentant marketer.
Just let immortal people have no more than one kid. That way the population (of immortals) can double at most.
> Can we reject the idea of a BDFL? Can we include as many people as possible? Can we be welcoming to folks who historically have not had great representation in open source? Can we reject contempt culture? Can we be inclusive of beginners?

I feel like in any language, beginners are more than encourage to write things in said language. Yet when working on language internals, you need to be more careful. Reading the Firefox programming guide on what's allowed/not-allowed in the C/C++ codebase is pretty eye-opening[1]. Have there been issues with core Rust developers not being kind or following their CoC? The author doesn't really include examples or explore this line.

As far as Reddit: I stopped using it the moment one of their CEOs altered someone's comments during the election and was not asked to step down. That CEO is still there. Reddit had their warrant canary removed years before that. All their original values are pretty much gone and they've gone on a community banning spree over the past few years. It's also no longer open source. I'm fine with any community rejecting this as any kind of official communication platform, but no one is stopping enthusiasts or hobbyists from using /r/rust

If actix-web has unsafe code and the authors are not accepting patches, and someone feels passionately about it, they could create a saftix-web fork, include all the patches, and maybe even develop it independently or pull in changes from upstream.

It sounds like things went down terribly, and that's sad. Was it just Reddit people, or core devs? I agree it doesn't help to attribute blame, but the author doesn't dive into where the problem might have started and what could have been done differently. I wish this had some more explicit examples of how the community screwed up, the things they did right, the things that could have been better. But then again, that could lead to call-out culture BS. I feel this article is missing some depth, but it's also something that would have probably washed over without the author going out of the way to write this piece. I dunno. /shrug

[1]: https://firefox-source-docs.mozilla.org/tools/lint/coding-st...
> the majority of YouTube videos are >10 minutes and filled with the same filler: Google's ranking algorithm.

Ironically now sometimes google shows video results suggesting to skip the first few seconds. I swear I've seen it a few times, but maybe I was being A/B tested
> Your type of argument could otherwise be used for pretty much everything - even large corporations. It's not useful.

No, if you pay for things, you have a contract and things are immediately different.
The problem here was not that there was criticism, it's the TYPE of criticism (anger, hate etc).

And you know what's a good form of criticism? An issue with an attached PR