skysight-inc/HackerNews huggingface dataset:
> For ‘moderate performance’ surely JVM based languages are what you’re looking for? There’s great tooling and a very low barrier to creating new languages.

Not sure I understand what you're suggesting. I was asking for a language with dependent types (or anything that isn't just another procedural/OOP language). Such a language could use any runtime, whether it be the JVM or anything else.
du -hs node_modules

1.7G node_modules
I hope my comments in the thread have not been interpreted as astroturfing. I have no affiliation with TabNine, I’m just a happy user.
I made https://taaalk.co - it is quite like debubble (also in this thread). It's a platform for online discussions. It's not focused on debating, but on exploring topics and sharing knowledge.

You can create a Taaalk and invite any number of people to join it using an invite link and code. If you don't have anyone to Taaalk with you can leave your details on the Start a Conversation page.

Some friends and I started it a few years ago and then stopped, so I thought I'd rebuild it during quarantine.

Some of the old Taaalks are on there, e.g.: https://taaalk.co/t/how-to-think-about-chess

It's the first app I've ever deployed to production so it's been great to learn about servers and hosting.
One long term solution is to have more self sustaining communities. Local food, local business and electric vehicles run from local renewable energy (wind/solar, still connected to the grid for efficiency).

That's great and all but only weird eco people like me and the commenter above you would actually want to live there. There are massive tradeoffs. First there are all the usual tradeoffs of not living in a city but there is also less variety of food due to reduced imports. It would take longer to get specialist goods and services and travel time to say a medical specialist would be longer. The other issue is that it's hard to have a cohesive community if you have the wrong ratio of different existing cultures. If you have half one culture and half another you get a fractured community. You need either a massively mixed diverse community or a monoculture. I'd opt for the former with an emphasis on maintaining diversity instead of sliding into a grey goo world culture. But even then I don't know because I don't study those kind of social issues.

The cultural problems, education and attitude problems are much harder to fix than the technical challenges. The draw of shiny stuff and tribalism is too much. That's where I don't think anyone has a solution. I just hope the next generation can figure that one out.
Seriously, I don't understand the discussion here. It's a solved problem, and the solution is what vimium does: press a key that opens a tab searcher and digit a bunch of characters related to the tab you want to go to, and you get presented with an ever-shrinking list of tabs (favicon, title, hostname, ..) that match your search as you type. Enter, maybe one or two arrows movements to select the final choice.

If you have 2 tabs or 2000 tabs it doesn't matter, going to a tab it's always a sub-second operation.

It is kinda native, at least in firefox: CTRL+L opens the address bar and on there you can search between open tabs. In my opinion it just needs some small UI improvements because at the moment the visual indicators to differentiate between open tab, search, history item, favorite in the results are not clear enough and the results are (or appear) mixed.
I agree, unfortunately.
If the de facto method refers to "chmod 777", I wouldn't call that securing ;-)

But indeed, if there is a separate user account for the application, then chmod can be used for some control to its access to files and directories.
If memory layout changes due to environment variables significantly changes performance characteristics then it looks like an opportunity to optimize this aspect of loading a binary. I assume cache alignment is in play here.
... so you're upset that you didn't get a service for free?
Absolutely. My point is simply that you can tell people what the rules are and which ones they may have broken without revealing absolutely everything about how you detect any malicious behaviour.
You can access the source code via GitHub if you follow these steps: https://www.unrealengine.com/en-US/ue4-on-github

Did a quick `cloc` run of the codebase, shows the following:

github.com/AlDanial/cloc v 1.84 T=86.60 s (949.0 files/s, 297044.5 lines/s)
---------------------------------------------------------------------------------------
Language files blank comment code
---------------------------------------------------------------------------------------
C++ 20720 1622066 1102650 7943910
C/C++ Header 46048 1443245 2403181 5914335
C 3123 311091 384178 1319332
Python 2625 164396 219571 693345
C# 2587 71616 99526 472242
XML 1429 4589 4985 420621
HTML 518 9623 1370 124409
MSBuild script 225 10 551 122808
JSON 231 59 0 122326
CMake 1655 18686 38278 97625
Bourne Shell 348 11335 15567 69747
Objective C 351 12507 15181 59608
Objective C++ 124 7159 3992 34551
Expect 20 3889 46 32132
INI 341 5658 1719 27645
make 682 9220 13527 25996
Markdown 156 7829 0 25333
Windows Module Definition 145 1871 144 23754
CSS 32 2699 553 23212
Java 102 3035 3832 18332
Pascal 15 798 26566 15507
JavaScript 103 2125 2208 15486
Perl 76 2253 2218 11634
HLSL 123 2518 3934 10942
DOS Batch 238 2492 1080 7361
TypeScript 32 1550 983 6242
Windows Resource File 70 1013 1348 3628
GLSL 38 685 487 2994
XAML 13 201 87 2861
ASP.NET 7 538 7 2687
Ant 4 54 216 799
SAS 1 14 22 32
Bourne Again Shell 1 0 0 9
---------------------------------------------------------------------------------------
SUM: 82183 3724824 4348007 17651445
---------------------------------------------------------------------------------------
> This requires trust. Like the current politicians or not, most populations respect their governments and are willing to support emergency measures in the short term. Whether they voted for them or not, they trust that their leaders are not evil.

Wait, in France and Belgium, the police is coming after your during lockdown. Think: road checkups, city patrols, etc. Fines are being sent left and right and people ended up in jail for breaking the lockdown too many times.
The great suspender will get you part of the way there.
Agreed. It's absolutely reasonable for a politician (for example) to get into power and discover that for some reason they can't do the thing they promised to do, but I'd love it if they'd just briefly say so and why, rather than brushing it under the carpet and assuming noone will remember what they said while they were campaigning.

"I know I said I'd increase funding for schools by 20%, but that budget is controlled by local authorities rather than by my office - I'm going to increase funding to local authorities by X% instead and ask them to fund schools" - that kind of thing (although, you know, you'd hope they'd know about the funding infrastructure before making promises).
Does the CPython GIL give you a stronger effective guarantee than the one in CRuby? Because the one in CRuby will absolutely not save you from data races.
Can you publish your own content alongside the RSS feed articles? Or is it purely aggregation?
The Path Not Taken: How We Accidentally Bypassed Window's PathCanonicalize()
> none of the screenshots in the post have anywhere near what I would consider a significant amount of tabs open.

Indeed. I have 16 tabs open right now and I'm not doing anything much.

I did originally think this was Google's equivalent of Firefox's container tabs (which are separate entities for cookies/logins), but that's apparently not the case from this discription.

Also I note that Google's web page breaks using the down-arrow key to scroll, so that's just another piece of reflexive shittiness Google are forcing on web users.
Studying: differential geometry, poetic edda.

Doing: lifting myself to hell and back and jump rope.

Building: Making maze generators in minetest (before moving them to minecraft)

And trying to figure out if I can find a function that takes two finite consecutive sequences with length N and M of natural numbers, which start by 1 (E.g [1,2,3], but not [1,2,4,5]) and give back a sequence which contain all the numbers starting from 1 up to the NxM, but not necessarily sorted without using the size of the sequences. So I want to number the cross product of the two sequences.

This crap is related to some programming problem I hit.

t = {1,2,3...} -- <- can be lenght
s = {1,2,3,4...} <- can be any length
xs = {}

for i,h in ipairs(t) do
for j,k in ipairs(s) do
q = f(i,j) -- <- I want to know if f is possible
to write
xs[q] = h * k
end
end

Well the answer is I think no, but I found some functions that work up to a certain number or that work within certain bounds, so how far we can stretch that? And of course it works for the whole set of natural numbers.
Amazingly, this is exactly how I acquired my SE/30, sitting on the side of the road in a pile of other junk. Had the keyboard and trapezoid mouse! I was still at university at the time and took great joy in writing an essay about wiretapping on it, then spending nearly a week trying to get the floppy drive working to get said essay off the machine...
Reddit is not a utility company - people do not organise their lives through Reddit like they do Facebook etc. It's, at best, a sometimes vaguely informational entertainment site.
Application Discovery as a Base for the Company’s Cyber Security
This is actually really nice! While I don't have a lot of tabs open at once, dragging my mouse over and clicking is really tedious. Even though the Firefox address bar allows you to switch to already open tabs, it's still not seamless. This is great for noticing the name at a glance and switching quickly.
yeah but i don't think MS uses TS-on-the-server enough or has enough Azure TS users to justify putting in the effort
Been working with a group building a mobile COVID testing laboratory and have written a Rails app for managing the test data & laboratory flow.

https://github.com/UK-CoVid19/opencell-testing
https://arcane-island-35232.herokuapp.com/

Also a set of mini-sites built on eleventy / netlify for local community COVID voluntary groups in London.

https://islington.coronacorps.com/
https://github.com/3dprintscanner/coronacorps
I've been working on an interactive timeline of US presidents to promote a new timeline maker product I will be launching soon.

https://www.chronoflotimeline.com/timeline/shared/3114/USA-P...
Number of things come to mind:

- How do you update dependencies? They are urls spread along many files which can be everywhere... Do I have to find and replace every import statement?

- In some enterprise environments, we use mirroring of package distributors (Nexus, jfrog etc.). This give us the ability to audit what packages are being imported, create a cache of packages so that a single delete or unpublish (like good old leftpad) won't break all applications, etc. Since package locations are hard-coded in the package files, it becomes challenging to do this.

The argument that deno is mimicking a browser is thin. Browsers are client side, they don't access databases or lives inside your firewall. Server applications are much more sensitive to security issues than browsers.
This, combined with automatic archival. I hate coming back to a tab I’ve opened months ago, only to see that the content has disappeared.
I've made a mobile game because I wanted to try React Native.
The pitch is: A brain teasing puzzle game. Easy to play, hard to master.

I know, very generic :)

https://zwout.fr

It's currently in closed beta (very closed) but if you're really interested, I can add you to the beta.
The last 15 years of computing can be described as "extract maximum revenue" rather than what people expected of computers during the 80/90/early 2000's.

Anyway, I've been considering building some pcie/m.2 boards for a couple of markets because the price difference between a "consumer grade" board and the server/embedded board with nearly the same features but minus a couple important things for some markets is about $25 in parts, but the markup is about $500. Its even worse in some of the built for purpose devices where wrapping a bit of sheet metal around said machine adds another $2k+.

The m.2 vs U.2 market is such a shitshow at the moment. And if one of the major players decides to create a form factor that happens to be compatible with m.2? Well huge industry outcry because they might remove everyones fat margins on "enterprise" gear.
No. This is how some cheaters actually think. Nothing matters as long as they don't face consequences. They always have some excuse, and if this one doesn't work that one does. It doesn't matter what the excuse is as long as it works for them and they don't have to face up to the fact that they are doing something wrong.

Then there's just the ones who know they are cheating and are just okay with it. That's your grade A evil there which comes in two varieties: The ones who pretend they don't know, and the ones who do it openly.

So you have your cheaters who do it openly.
The ones who lie about cheating.
And the ones who have lied to themselves.
The language doesn't seem like the interesting part here. Bosque appears mainly to be a vehicle for exploring a different way of thinking about compiler IR. From the MSR site[1]:

> In the Bosque project we ask the question of what happens if the IR is designed explicitly to support the rich needs of automated code reasoning, IDE tooling, etc. With this novel IR first perspective we are exploring a new way to think about and build a language intermediate representation and tools that utilize it. Our initial experiments show that this empowers a range of next-generation experiences including symbolic-testing, enhanced fuzzing, soft-realtime compilation with stable GC support, API auto-marshaling, and more!

[1] https://www.microsoft.com/en-us/research/project/bosque-prog...
Bringing SEC disclosures kicking and screaming into the 21st century
Is there support for adding ads or monetizing ones community?

Great project btw!
Their business isn’t solely built on google. Part of it relies on browsers and google have a dominant position in browsers. Should no one build a business related to browsers until google is toppled? I wouldn’t follow your “rule”, as most successful businesses started out by violating that rule.
https://youtu.be/cmETioVtRG0
Trying to build this on a smaller scale using Arduino, 25 droplets. Goal is to make it as cheap as possible. Interesting software problem is how to control many arduino's in synchronized fashion. Stack is C++ Arduino <- serial -> C++ ESP 8266 <- wifi -> server in go and websocket.
Arguably garbage collection is a huge boon to productivity though. I agree about the first two, but I think the whole memory allocation debate is too contextual to be an issue in the general case. Big projects tend to have customized memory allocators which make most benchmarks usefulness dubious - that and reference counting can be nondeterministic too (you deallocate an object triggering a huge chain of frees).
> is a breakthrough research project

[citation needed]

In all seriousness, each time when I see a project self-describing itself as a breakthrough, it is a red flag. No matter if it is programming, mathematics, arts, or anything. (Of course, unless used ironically.)

Either, it is a huge ego and a total lack of self-skepticism (vide Stephen Wolfram's recent Theory of Everything) or fiddling of the marketing department.
Centralise GNU/Linux email delivery like it's 2020
I'm more entertained by the notion of having the LE chase after some car performing a random-walk around the countryside... :)
Your execution is great!

I have been working on something very similar but with less of a focus on debating (https://taaalk.co). (Indefinite chats, any number of participants.)

Some friends and I started it a few years ago stopped working on it, so I decided to rebuild it over the last few months. Some of the old Taaalks are still on there:

https://taaalk.co/t/how-to-think-about-chess
I don't think running a public web server application is one of the envisioned use cases here. It looks like a tool for quickly and dirtily getting some job done. But I agree that to get something useful done, you probably need to open up a bunch of permissions, so you're still running arbitrary code on your machine.
> How is this different from other Lisps or Schemes?

Janet has almost nothing in common with Lisp or Scheme, besides the parentheses and the presence of some form of macro system.
> Basically, manged social networks like Reddit are all terrible

Manged is the word I use when I'm referring to management that's been done badly. I'm sure yours is a typo, but if not, it's a word that should catch on.

Use in a sentence:

My Manger just asked me to do two tasks, which they don't even realise are mutually exclusive.

The Mangement is taking this company down the tubes.

That project was manged into the dismal failure you read about in yesterday's paper.
Install script does rm -rf /usr for Ubuntu
Show HN: Modern-WASM-starter, easily create type-safe WebAssembly packages
This is just completely disingenuous from Google.

> - Request access to the narrowest permissions necessary to implement your product’s features or services.

> - If more than one permission could be used to implement a feature, you must request those with the least access to data or functionality.

> - Don't attempt to "future proof" your product by requesting a permission that might benefit services or features that have not yet been implemented.

My first thought was "oh it would be NICE if G actually enforced these". But the truth is that they're not. One glance at the Android Play store, and it's abundantly clear that Google is letting shitty apps request whatever unnecessary permissions left and right.

Literally the top flash light app requires "full network access", GPS precise and approx location, "view network connections" and "receive data from internet".

It's complete bullshit, Google isn't policing these permissions at all, but just using it as an arbitrarily enforced rule.

It's pretty clear what the incentives are. Android already has a flashlight, but this one has ads, harvests and sells your data, and uses Google Play Billing Service. Win for Google. On the other hand, there's PushBullet, which gives users more control and this is key, the option to use a platform that is not controlled by Google. It has nothing to do with user privacy.

And the whole nice thing about these permissions is that they are granular, this means it should be trivial to point out which one is wrong or better and why, like an error message. That is not "gaming the system", it's literally what these permissions are for.

This is also clearly not an automated scanning process that PushBullet accidentally got hit by. Because it would have to have been a very slow running process, given the heaping amounts of trash in the Play Store. And then it just happened to pick PushBullet instead of the Flashlight app that has 50 times more downloads??
Doesn't this go both ways? Improving your posture does reduce your stress and improve your life (in the way that you mean).
I've been working on my sideproject BitPull, a browser automation tool. You can create pretty complex workflows with it to extract data or just automate things in general.
https://bitpull.io
Can't you just release it as open-source for self-hosting. I think that could go under free speech and the source code will always be your invention. I wonder how is it done with myriads of software/hardware emulators and clones.
Intellect makes therapy more accessible in virus-hit SEA
Try this: ctrl-L, type % type space type search term. It restricts the search to open tabs only.
The map shows per-week z-score excess, not some kind of yearly total. What you said only applies to week 17.

During week 15 (Easter), Sweden had "very high" excess, Ireland had "low" excess, while UK, France, Spain, and Italy had "extremely high" excess.
I think you're missing a few aspects that explain the change in attitude pretty well:

- While most people have almost nothing to fear personally from this virus, the vast majority of people have close ones that do have a lot to fear from the virus

- We have all found out since March, and took to heart, that you may get the virus, feel well, pass it on to loved ones who are at risk, and only later start having ANY symptoms

- the time required until 40-70% of the population will catch this virus while never having so much people infected that hospitals are overwhelmed is YEARS - the popular flatten the curve article omitted this little piece of math

- and obviously, everyone was probably pretty moved by the scenes from Italy and Spain, which brought it much closer to home than similar scenes in China or Iran ever could

So overall, most people are understandably reluctant to go on vacations or visit too many restaurants and concerts, and this will likely continue for a good long time. It is going to be devastating to these industries, but it's going to help keep the curve flat, and I'm sure that we'll see plenty stimulus packages in the months to come. Keeping things forcefully shut down is not going to help in places that are in good shape. However, the alternative must still be social distancing and careful screening and perhaps even enforced quarantine for people coming from hotspots, whether internal or international.
Show HN: The AI-enhanced call experience
One thing I'd like to see would be a comment section that uses a multi-armed bandit algorithm based on upvotes, or by something like Thompson sampling. So each time you refresh, comments that have more upvotes tend to be shown earlier, but the fewer votes in total they have, the more it's up to chance where they appear.

If it uses a deterministic MAB algorithm, it would put unvoted posts at the very top. The MAB algorithm is constructed to find the best choices (here, most liked posts), and it can't know what the true score of a comment is if nobody has voted on it yet. Thus the need for exploration would push those posts/comments very high.
I'm building a web app for sending newsletters with AWS Simple Email Service https://github.com/mailbadger/app. It's still a work in progress, I'm still a couple of features away from releasing a beta version, but basically you'll be able to import your subscribers, group them, create templates and create and send campaigns. After that you can see statistics such as bounces, complaints etc.

I'm using Go for the backend and React on the frontend, along with MySQL and NATS for message queueing.
How does the verification work? I see the Z3 prover in there; is there more detail on how that works with this language?
Start with very short walks / runs in the first few days. Otherwise your calves are going to get sore.

I started with Vibram FiveFingers, but switched to proper barefoot after a short while. If you can do proper barefoot in your area, it's more fun.

Always work barefoot at home, if you don't already do that.
How? Say I have `script.ts`. That file exists locally on my computer and the code inside it is trusted (say it was downloaded from a trusted github project via https). It contains

import { dependency } from 'http://whatever.url/@1.0.3'
with hash '6f09aa686a6263f9e992'

or something like that. If an attacker replaces stuff during transfer of the dependency, then the hash won't match (assuming a collision resistant hash function). This can be transitive if the dependency also has hashes of its dependencies directly inside it (and a "only allow that" mode could enforce it).

The additional benefit is that you also don't need to trust the server to not replace code for a URL under your nose from one you have previously verified. So like a lockfile, but without needing to download a separate file (because you also want verification on the first run) and a command-line argument on launch - which makes it a much more viable replacement for bash scripts (in fact, that's why I care about the ability, I wouldn't mind https-only). Am I missing something here?