skysight-inc/HackerNews huggingface dataset:
I agree. While Rust is clearly a step forward in programming languages (and we need a step forward), modern tools built to deal with the issues common in C and C++ like coverage-guided fuzzers, ASan, Valgrind, etc. have made huge improvements in finding memory safety vulnerabilities and other issues. Mitigations have also improved, making it more difficult to exploit memory safety issues.

While I think that unmanaged (i.e. no runtime or interpreter) memory-safe programming languages are a good idea, they're not magic and we shouldn't ignore the other major security tooling improvements recently.
>That's mean, but you'll just have to live with that

I mean I know we're all on board with the idea of intellectual property actually being a thing now, but surely there are limits? I've seen people take the hard-line stance that if something is your property you should be able to dictate exactly under what situation it can be used, but there have to be limits to IP holders rights on some level, and I feel like reverse engineering a file format is a pretty reasonable place to draw that line.
Subvocalization
https://en.wikipedia.org/wiki/Subvocalization

Speed reading
https://en.wikipedia.org/wiki/Speed_reading
If you use certain new features of SQLite, the database file gets "upgraded". At that time, you must use a version of SQLite that understands these new features.

So, the other computer you used was probably running an older version of SQLite. Just update it to make it work.
Probably the font APIs weren't really designed for this in mind so it can't just be dropped in as-is.
Noob question but if you've already bootstrapped your startup, aren't you ahead of the competition and likely to get the funding, instead of the funding going to your competitor.

Just trying to understand the context here: your competitors apply/get-approved before you do, or is it that you don't want to take the funding? (or something else going on).
That's if you use 'Safe Rust', then the safety guarantees hold true. However, the risks increase as soon as you start using unsafe{} or import a crate that also has unsafe{} code which is why I like using cargo-geiger on my projects to see the unsafe{} uses in my code and dependencies [0]. Use unsafe{} at your own risk. [1]

[0] https://github.com/rust-secure-code/cargo-geiger

[1] https://arxiv.org/abs/2003.03296
If a child were to be exposed to a 4D world, would they learn to understand it?
The first Crusoe Product was a Sony Picturebook. Somewhere in Japan there’s a prototype of that laptop with Linus’ and others signatures, including mine. It’d be fun to try and track that down someday.
I'm learning Elixir at the moment. I've mainly done OO programming so there's a few new things.
What does offended even mean really? What if someone just thinks your views are not constructive? (I haven't voted either way on any of your comments, but/although I support these easy changes.)
I found the thumb cluster borderline unusable on the Ergodox. The Keyboardio Model 01, which is my daily driver now, has a somewhat similar layout but excellent positioning on the thumb cluster and modifier button.
I would think the domains are different enough that trademark infringement shouldn't be a concern.
I'm building CodeWyng, a Chrome extension for GitHub that brings IDE-like features (hover documentation, jump-to-definition, and find-references) to code on GitHub. It works for Go right now, with more language support on the way.

It supports local variables, works on any commit/PR, and understands Go well enough to disambiguate between different functions with the same name.

Looking for feedback and early adopters!
Be good at writing. I cannot stress this enough. Be comfortable articulating original ideas in writing. Be thorough, precise, and objective.

In the corporate world that one skill is what separates the adults from the children in the room.
Renaissance hedge fund loses 20% this year
To be fair the whole election hanged on a stadium full of people flipping. If Trump wins in November (like Johnson this year) it will be a better sign that people are pissed off at idpol.
Harsh enforcement of a numbing philosophical and social conformity, for starters (e.g., cancel culture).
South Asia now has the oldest evidence of bows and arrows outside Africa
A crazy parallel universe where iPhone came before the web and could shape it from its inception, surely.
Can you elaborate on the "propaganda" comment?
I count Jeff as a personal friend, and I think you’re exactly right. Everyone was riding his butt to port to Python 3, but the giant companies using Fabric weren’t exactly lining up to help. He found that incredibly frustrating.
Three polyglots, two period-two quines, and one code-golf challenge
An important point is being missed in this conversation.
The CCP can and does threaten the lives of the family of any Chinese person who does not do as they are told by the party. This gives them "extra leverage".

As the CCP ambassador to Sweeden said recently: “We treat our friends with fine wine, but for our enemies we got shotguns.”
Is it worth the ride though? If your goal is to spend your time building something you love then it's a win.
> There is a trend, and the trend has been a MASSIVE reduction in memory errors. The percentage of security issues that are memory errors says nothing of the totals, which is what matters.

Except that CVE's seem to be increasing over time across the industry, not falling. There is no overall reduction in the numbers.
I worked at Transmeta for a short time (about a year) after my undergrad. I loved it. However, there was always a running joke that the stock ticker symbol should have been “HYPE”. It was sad to see things implode the way they did.
Why would you block the UI thread on a transaction?
This is a completely vapid and entirely generic attack that could be posted, verbatim, in any discussion of any research paper.

I'm barely exaggerating with "verbatim": remove the parenthetical ", and you should probably be wearing a mask" as well as the quote at the end, and read it again. It could be concern-trolling any statistics paper, ever!

And what's the point, exactly? Sometimes, results from research later turn out to be wrong, and therefore it is best to completely ignore them? At some point you'll deign enough time to have passed to allow some research to be useful. But until then, you also recommend masks, because..? How is your hunch a better barometer of truth than actual research using real-world data?
On a related note, i once came across the notion that free memory isn't doing anything for you.

It's kind of obvious and does not at all explain chromium's lower bound of memory usage. But: if Chromium runs better with more memory and no other process is using it: please take it!

That is what it's there for, after all.
I think you’re proving the article perfectly. I read the entire thing. And you don’t read more than me.
People that prefer functional languages seem to be the only ones that care enough to put in the time to build them.
I'm gonna give you the benefit of a response coz I don't think it's helpful to express disagreement through a downvote without attempting to explain why.

> I don't get offended by other people's words and I don't expect other people to be offended by my words either.

You shouldn't expect other people to feel the same way as you either. You can't decide how offended someone should be, as that's their own reaction to you. It might seem extreme or overboard to you, but how much do you know about them to judge that?

> Does that make me a bad person?

That's not really the question to be asked if we're talking like mature adults, because this isn't anywhere close to as simple as being 'good' or 'bad' (whatever that even means).

Which is all to say, sure... you're fine to be a naturally born careless person, as much as a cop-out that actually is to hand-wave everything away with "it's just who I am," or "I tell it like it is!". It's fine for other people to think you're an asshole for it, and if I were you I'd grab my friends over a drink or something and ask an honest question: "how do I generally come across to you?". Prepare to possibly have your feelings hurt.

And the reason why I say that is because you come across as quite casual and dismissive about people getting aggravated with you when talking about things, and maybe you're not listening to what they're actually saying.
Considered it, though by the strange rules of the US credit system, it would harm my credit score to do so.
For my windows desktop, I have a StreamDeck [0] plugged into it. It's a 15 key board, where each key is an LCD screen.

It's designed for streamers (twitch/youtube), but has a few features that make it more general purpose. It can change layouts based on the active application, the actions can be bound to keypresses, and it has an SDK [1]. It's pretty neat (although the hardware feels cheap, and the SDK is pretty awful to use).

I've been tempted recently to look into hardware like the Loupedeck CT [2] as a more "premium" alternative, (and I like the idea of using the the dials for strange axes - scrolling tabs in a web browser/samples in a sampling profiler) but their documentation is hidden, and it's almost 3x the price of the stream deck.

[0] https://www.elgato.com/en/gaming/stream-deck

[1] https://developer.elgato.com/documentation/stream-deck/sdk/o...

[2] https://loupedeck.com/en/products/loupedeck-ct?skip=true
How Utah’s Tech Industry Tried to Disrupt Coronavirus Testing
Say you went to a city with no air pollution, a high rate of exercise, great diets with antioxidants and omega-3s, no asbestos or radon, and no genetic predisposition to lung cancer. And you find that, in this city, heavy smokers have a lower rate of lung cancer than the general population of the world.

Do you conclude that the overwhelming abundance of data that shows that smoking causes lung cancer is wrong? That there cannot be a causative link between smoking and cancer because there is a counterexample where it didn't appear? I would say that these other factors are also having an effect of comparable scale.
Hmm for some reason C++ equates to 'cpp' in github search.
Has anyone worked on rust for microcontrollers? STM32 and Arduiono ?
I didn't take "you'll just have to live with that" as a claim that the user couldn't reverse engineer it. It simply means that they've made it harder for the user to do so, and so the user has to live with it being harder.
I originally thought this was the Medallion Fund, but it's one of their other funds that is open to investors, so not as noteworthy.
Which US President was elected by the population? As far as I know, they were all elected by the results submited by the electors of each state, or the selection of the house of representatives (or through succession after a vacancy of the office).

Pretending there was a popular vote when there wasn't is like claiming whichever team scored the most points during a series of games won the series dispite the fact that the series is decided based on which team won the most individual games (although some tournaments do include total points scored as a tiebreaker).
One of the things you should be learning from these protests is that the police lie all the time, and are never held accountable for it.

Look at how flagrantly the police lied to cover up what they did to Breonna Taylor, or Freddie Gray. This is their standard MO: Lie and cover-up.
Attract people with promises based on unwarranted denigration of other technologies. They should present appropriate, independent studies instead, not just claim something. In the article itself you can read that even Microsoft with its billions of lines of C++ code will certainly never switch to Rust. And in C++ 23 something similar to what is not even thought through in Rust today is also planned.
So knowing is little solace for people that are affected. People who aren’t affected seem to always be the ones saying stuff like this.

See for example - “at least we now know that minorities are getting beat by the police now that it is getting filmed” ignoring the fact that it was happening for decades and no one believe it.
Show HN: Tour my pull request Chrome extension for GitHub
You're shadowbanned, usually because people have flagged your comments as nonconstructive in the past, and although I would personally think your other one is a bit ranty it's probably not worth being flagged, so I vouched for that one and this. If you're seeing this consistently I would email the moderators at hn@ycombinator.com; they'll be able to help.
> the trend has been a MASSIVE reduction in memory errors

What is the evidence for this? I'm not familiar.
I was excited to bring my new fountain pen with me, on a job, outside in 105 degree weather. It was a cartridge and somehow ended up covering my head and face.
Facebook is the modern day internet gangster cartel, they are not even trying to hide it any more. This is an obvious trap that is easy to avoid.

Sadly, I doubt there is any company that can take them on.
I was hoping this was a question about applying NLP to coding tasks, but based on the answers it is about voice to text for the special use case of coders.

I am not a coder, I am a writer. I wonder why all these AI people are trying to create things that will displace my means of earning a living instead of something that will create applications?

Why can't I tell my Mac: "Computer: take this collection of files and extract all the addresses of people in Indiana."
Unfortunately, the optimization goal for commercial entities generally is maximum money extraction, not simplicity :)
Pilot Namiki Blue-Black is cellulose reactive and very permanent yet safe for fountainpens.
Unsafe is not a problem in my experience. The same way a kernel might have some part written in asm (for freebsd it's like 1% I believe) your rust code will have 1% of Unsafe code. Might be more depending on what you are doing. However the same way few bugs happen in the asm code of a kernel, your unsafe will not have many bugs.
Softbank is not a software company and probably isn't trying to copy and undercut your business in the future
They had a lot of crazy smart employees. Aside from Linus, one of Quake's authors worked there. And I had a Google coworker (who, while at Google, wrote the C++ framework that all their C++ webservers are based on, and also was one of the early engineers on Dart) who was a Transmeta alum, and had previously worked on Hotspot before that.

It's one of those companies like General Magic and Symbolics that were complete failures in the marketplace, but are known for their alumni network. Even though the product didn't go anywhere, the tech that went into the product was incredibly impressive, and the engineers that built that tech are top-notch.
> If you have an FPS or interactivity target that needs to be guaranteed to be better than about 0.1-1 second - depending on platform - you can't have any disk IO at all on the UI thread, or any thread that's supposed to react at interactive rates at all times.

Yes, and other file formats encourage doing things in memory, so you don't have any disk i/o in the common path.

Using sqlite as a file format strongly discourages the simple, jank-free until you press save workflow of slurping your content, operating on it in memory, and then outputting it all in one operation as a response to an explicit user action. Instead, your whole application gets small but perceptible delays across all operations and interactions.
Am working at a bootstrapped startup. Actually profitable. In a very competitive space. No VCs to answer to, no irresponsible burning of cash on marketing and bloating of engineering team. No AWS. No expensive SF office or lunches paid by VC money. Hiring is dictated by our revenue and profit growth, and no we don't spend VC money on absurdly overpriced engineers.

Because we're run super lean, we've been able to hire more and spend more on marketing during these tough times while businesses are downsizing or putting a halt on hiring/marketing dollars.

If the space you're getting into requires lots of capital, fundraising is unavoidable, but if you're thinking of even bootstrapping a company, it better be one that won't require a lot of capital (SaaS), and you need to run it lean.
Face masks don’t even have to work especially well to be effective
> There is a trend, and the trend has been a MASSIVE reduction in memory errors.

Citation?
I think SQLite is underrated.

With WAL mode + increasing the page cache you can get some excellent concurrency, even if doing reads and writes at the same time.

With rqlite it's easy to make it a server database and have a cluster of SQLite databases (https://github.com/rqlite/rqlite).

I wouldn't try to create the new Instagram with it, but I think it'd be capable enough for many apps that are built on top of more complex DBs.
Infinite sets are a useful abstraction, but uncountable infinities can probably be avoided since the Löwenheim-Skolem[0] theorem says that any countable first-order theory has a countable model.

[0] https://en.wikipedia.org/wiki/Löwenheim-Skolem_theorem
Depends how much lobbying power they have I guess? There are multiple competitors that are less dysfunctional and provide the same service. There is no legitimate reason to bailout Hertz in particular.

The debt itself must be car leased from the manufacturers (with some layers of insurance/bank atop), the manufacturers could restructure the debt to not bankrupt Hertz if they cared about it.
Rust users have a reputation for being eager to promote their language. There's a running joke of a "Rust Evangelism Strike Force" that roams the internet looking for places to "Rewrite it in Rust" and this is, in my experience, at least partially true.
That's fair, looking forward to your 'incredible journey' with Facebook. I'm sure they can't wait to see what your startup will come up with.

/s
Those clients may have trouble taking those projects in house or bringing them to another 3rd party developer!

As an advisor on these kind of projects I usually advise clients to be very conservative about the tech used by 3rd party developers or agencies..
Something I don’t understand. Insurance companies seem to have an incentive (more profit) and collective bargaining power to reduce what they pay. Why don’t we see a downward pressure on healthcare prices, then?

The typical narrative I hear around large healthcare bills is “racked up large charges because insurance will pay it” which is the opposite of what I would expect given the incentives I understand. Do insurance providers have a non-obvious incentive to keep costs high?
Confess HN: 40% of my app's 5-star ratings result from a minor bug
I'm running a printable escape room game. People love it- but they don't rate it on the App Store, they mostly play it 2-4 nights and then delete it - fair enough!

Recently, my ratings skyrocketed. Why? I was also receiving much more customer service complaints. Turns out: those complaints, and me helping people, were the reason (!) for the good ratings, and for people rating it at all.

What happened?

A while ago, I started selling Escape Team on Groupon. Groupon got 10K+ voucher codes from me, each looks roughly like this:

G--*

Being the cowboy programmer I am, I implemented my voucher-checking PHP code very straightforward.

It will not (!) forgive users who didn't put in those dashes.

But they do, every day. And then? They reach out to me to complain, I tell them about the dashes, they apologize. I tell them they are not the first, all good. PS: We'd love a positive App Store rating!

And there we go.

They rate it. Not the app, but the service - and the short experience of (true) humanness.

Not sure how I should feel (or act) about this, but I think it's an interesting example of unexpected UX effects.

If you want to play it yourself, here's the game:

https://www.escape-team.com
Sleep during Covid-19 lockdown: Longer and more regular, yet worse
Actually, a lot of bugs happen in the assembly part of the kernel. Processors are hard ;)
How the Tesla Roadster Rockets Work – 0-60 in One Second?
Because you've got another operation triggered by a UI action, and you need the previous one to finish, for example.
There was a “popular vote”. We know the exact count of who voted, whether the popular vote decided the outcome is completely orthogonal to whether it had an impact doesn’t say that it didn’t exist.

The fact that the popular vote is ignored because of how the system is designed is the entire point.
Kiki or Bouba: What Is the Shape of Your Taste?
Completely agree - I wrote about some fun I had with Apple Photos last month: https://simonwillison.net/2020/May/21/dogsheep-photos/
Facebooks Libra coin just got released 1 hour ago you should get some fast
Yes, they could.

Or they could pay the ransom, which they deem to be less expensive than dealing with the regulator, and improve their data security to ensure they don't get caught out again.

I fully understand (and support) the reasoning behind GDPR; I just think that in this case there is a path which is easily open to abuse by attackers.
When will this meme die?

Zoom is NOT a Chinese company. It is incorporated in and headquartered in the US. Like any American company ever, it follows US laws in the US, and local laws in other companies where it operates. End of story.

Yes their culture certainly has stronger cultural internal ties to China, due to the number of Chinese employees, but what has that got to do with anything? At the end of the day, they're a public, profit-driven corporation trying to make lots of money across the entire world.

It's not like they're secretly and nefariously doing the CCP's bidding, which seems to be the veiled suggestion people keep making.

Seriously, every time someone brings up that Zoom is "really" a Chinese company, it comes across as borderline racism or conspiracy-mongering or both. And while I'd usually never comment on someone using a throwaway account, in this case when you're pushing these kinds of shady "stronger than the more-commonly-discussed" insituations, I think using a throwaway here is representative of exactly the kind of astroturfing that spreads malicious rumors without evidence.
> But given what we know about the NSA and the context around it, I'm enclined to trust The Guardian and Snowden about it.

None of my options suggested above required not trusting them. Either Apple lies about cooperating, the FBI lies about having access, or the FBI has access without Apple's knowledge.

Anyway, their statements on the matter go much further than what a gag order would require.
> Thanks for the link, but only when the OS or your computer crashes, not even the application itself.

Ah, right there are also the journalling knobs that you'd tweak to get to max performance -- either in-memory or no journalling at all make a big impact. There are a bunch of them scattered throughout the docs.

> Could you introduce any application file format that is safe in that case? Obviously your JSON file format is much more unsafe than that, not to mention the huge overhead of JSON with binary data.

Yes, any format is safe if you write to a temporary file, and then rename(2) it to replace it. This is guaranteed to be atomic, so it works with anything (including sqlite, though at that point all sqlite does is cost you performance and complexity).
Fair enough, but that means if someone's following the advice in the article ("It deserves your consideration as the standard file format on your next application design") they need to consider "will our users want to use our files on network filesystems?".
Isn’t that pushed into the app developers to maintain compatibility in other ecosystems?
That's exactly what the protesters are fighting for. Protests are almost by definition inconvenient to some people.