skysight-inc/HackerNews huggingface dataset:
> What if tomorrow some change of parameters makes my business impossible? I'll go out of business. That's always an option.

Yes and no one can sue you for going out of business. But you can be sued for violating a law while your business is in operation.

> Dealing with every possible risk ahead of time generally isn't an option.

No you need not if you use standard software development tools that do it for you. You would need to worry about it if you plan to implement everything on your own.

> If this was a real problem for software in general, why is there no cottage industry of shady lawyers using people with disabilities to sue software vendors in particular? There's obviously lots of software that is not accessible, or not accessible enough.

When there is a clear law that states that you have to make your software accessible you have no choice but to implement accessibility. For personal use you need not. For open source projects, the implementation rests on the shoulders of those using the project for end-user facing software. You can get away with it for a while, just like you can get away with using pirated software. But then law will catch up anyways. Just because there is no precedent set doesn't mean that it is legally allowed. Would you want to be the first test case? A scapegoat? I bet not!

As far as why there are no cottage industry of shady lawyers: Maybe those shady lawyers have bigger fish to catch. Maybe there isn't much awareness about it in the legal circles. Could be variety of reasons why.
I've a feeling there's multiple definitions of build reproducibility going on here. I'm guessing you mean that it's not important to be have something byte for byte identical, but more to ensure that exactly the same build steps were run with the same source code?

For most of us, that's what build reproducibility means, but I guess for a subset of users it means producing an identical binary.
The only exception is that you would probably still need few test specialists, the same as devops specialist or frontend developers no one person can know all the tools and methods.
It's good to read about these kinds of studies. Ecologists typically don't seem to account for evolution in their models for global warming. Nature is excellent at adapting to changes. If there is a surplus of anything, certain specimens will benefit from this surplus and nature will adapt and balance things out.
You should consider LastPass. They've had considerably fewer security breaches than KeePass and is accessible either using a local app or from any modern browser regardless of OS. It even has a smart phone app, although the phone app requires a subscription.
Those two things aren't necessarily in opposition.

For example we can choose to have sympathy and empathy for Kanye West during his public struggles. (Or not. I'm not telling anybody what to do. I don't have strong feelings about the guy myself.)

We can recognize that yes, clearly, the man is struggling with something. We can also simultaneously refrain from hamfistedly trying to figure out what, specifically, he's struggling with.
By making use of APIs that deliver ready made HTML snippets via WebSockets, with on device caching.
linked below is an old advertisement/demo video of a similar device or maybe even the one you mentioned :)

https://www.youtube.com/watch?v=-G8sEYCOv-o
Woah! I think a lot of people in the free / open source community might have a problem with such a statement.

However, I do pay for a password manager because I recognise their importance and view them in a slightly different, almost unique way. I'm not averse to paying for software and services online, too.
The answer is it depends on the maturity of framework and how it manage extensions.

There are many framework out there that is hard to add another extension / plugin when it's not included in configuration. Some example maybe if you want to connect to multiple db, elasticsearch library, redis, etc. It's sometimes hard to do something when the app booting due to the nature of framework.

On the side note though I find Laravel is mature enough for standard use.
If you want watermarks to survive jpeg compression, you have to do DCT block manipulation, not just individual pixel values.
The entire thing is just a vanilla HTML/CSS/JS connected with Firebase.
Still, sooner or later, the data center will be hit by a natural disaster, a DoS attack, a network problem, or the like, and you'll have to be ready to move to a different one to get your service back online. Or you'll have to reboot your server to apply a critical kernel security update, in which case you need to be ready to fail over to a hot standby. So, since relying on a single server with high-uptime hardware is penny-smart and pound-foolish, might as go with a cloud-style architecture with commodity hardware.
Roblox is like a game engine that you can script in Lua, plus the servers to run the engine for you. The barrier to entry to make a game is relatively low -- making an obstacle-course game requires almost no coding, for example.
One thing you missed here:

In most of these designs the Relying Party (a web site in these cases) has to store secrets and we know bad guys steal secrets and the site won't always find about it immediately or sometimes at all.

For a password we somewhat mitigate this using password hashing. If the site uses a halfway decent password hash and you use a halfway decent truly random password then this is enough to protect both of you. But if you use a bad password or the site does a less than great job protecting it then game over.

For SMS the site stores your phone number (not terrible but not great for bad guys to learn) and maybe a temporary code (bad guys may be able to use this by learning it before you do but that's typically a small time window)

But for TOTP and similar "One time" codes the site stores the generator value. Bad guys who have this value can make any number of fresh codes at any time.

What jumps out here for WebAuthn is that the site stores nothing of value. A random-looking identifier that's useless for anyone other than the Relying Party, and a Public Key that's useless for anything at all other than confirming signatures made with the corresponding Private Key.

I've published the actual database contents for some of my own WebAuthn credentials on HN before, because they don't matter, unlike even an Argon2id password hash they are designed to be utterly useless to bad guys.

That's a huge benefit because there are fewer people trying to break in because what you have ain't worth stealing any more.
I am sitting in the same boat I guess ... write backend systems that accurately bills customers and vendors daily but the idiots who takes ages to do their pretty tableau iPad presentations ranks higher.
I've had one specific dream for 4 years and although I did nothing to get closer to it I've never forgotten it. I used to do some lazy things that fooled me into believing I have made progress. Instead I decided to just get the necessary skills now. I've spent 2 years "reading up" on electronics. I've learned more in the past two weeks than in those two years.

Of course just having the right skills isn't the same as achieving the dream. I still have to put in "the work" after I paid the entry fee.
The problem came from fat-fingering a command for DB maintenance while running as an admin. This then ran scripts intended for a development environment. (Development environments don't need to be careful about destroying stuff).

I suggest ideally all the maintenance tasks can be done automatically, without needing the command to be run manually. Such scripts can then run in staging before in prod; or if the scripts necessarily only apply to prod, they should be reviewed carefully.

If prod admin must be done manually, then make you could make it harder to run the development scripts with such admin privileges.
For years of my life, all I thought about was stuff like this. If you've ever ran latency sensitive systems on the JVM.. man is it ever a pain.

Who was it that turned GC off entirely, minimized allocation and just restarted their VMs when they ran out of RAM every couple of hours, was that Netflix?

Either way. It makes me excited for Rust and the languages it'll inspire, all this labor gone away.
reply to: madhuha.kmk@gmail.com
Ah, I did pay someone to do the millwork and trim work. You need a very accurate miter saw and a lot of experience to make perfect niters. I’m getting there but I still get off by a 1/16tb” to a 1/32nd” often.

The finish work is the final last guy. The guy that did our trim would randomly yell out swear words every 20 minutes. His life is hard. And he was expensive.
Am I the only one that finds the automatic popup chat really intrusive? I generally leave the website shortly after.

Give me the option, if I need it I will use it. Force it on me I will leave
Having learned FP's design patterns before OOP's, it was amusing to ask questions such as, "what are the laws for visitors/iterators/builders?"

In the FP community, the laws for folds/unfolds/functors etc. are sacred, which make for very robust programs and well-behaved libraries.
Pcr test inventer said its no good for diagnostics due to false positives. Civil war?
I also do this, and I have a backup Yubikey in cold storage for all the services that supports it. Better be safe than sorry.
Yeah I am still miffed over Google Reader :).
Short answer is that Datalog is originally a logic/proof language, while SQL is an arithmetic / statistical / tabular aggregation language.

One can make one solve problems of the other but they're really different mental models, which impacts the representation of the data needed to enable their use.

For Datalog one needs relationships- a graph- not what SQL calls relations, which is just data. Datalog requires a richer set of opinions- at least conceptually- about the data.

Languages like Datalog will not become mainstream until graph modeling is mainstream.
Any links? Teal appears to be an assembly language from my google search.
I would not do that ... DMCA takedowns galore !!!!!
If there was a full scale nuclear war. And then the next week the Yellowstone super volcano erupted. And then the week after that an asteroid as big as the one that killed the dinosaurs hit Eurasia, earth would still be wildly more habitable that Mars.
The dollar will only depreciate if interest rates in other countries/currencies are higher, right? What leads you to believe interest rates in the US will be significantly lower than in other countries?
On transparency and one-legged stories
Nikolaus with an "o" aka St. Nicholas or (Saint) Nicholas of Bari, was an early Christian bishop of Greek descent based in what is now Demre, Turkey.
Bayesian approaches are more transparent regardless of them being "honest" or not.
Right, and I like the ability to re-build a release from 6 months ago and get something that reproduces the behaviour of the previous build - i'm not concerned if the binary is identical, more that it is functionally identical. A typical way of breaking this would be for build scripts to move forward but not be made backward compatible, or easy for the previous version to be used for an old build (for example, a newer compiler getting used rather than the one originally used).

I've worked on enough stuff where releases get held up for various reasons (and so production software can be 6 months behind head) and there's a desire for a fix to the released version and hence changes made to a branch as well as head to apply the fix. This sort of thing is made much easier if you don't have to spend time trying to work out how to get the branch to still build!
Ugh...

If building the same source produces different binaries, then I'd like to know (a) what is causing the difference and (b) what other differences does it cause?

Being able to produce a consistent result is simply a sign of professionalism.
Doesn’t support iOS
Since I was 15, yes. Still with the mom over two decades later. She had to take a year off high school and skipped college. I graduated on time and got academic scholarships to cover tuition for university. A hard start; I don’t recommend it. I like how things turned out, and I like who I am and my history is a major part of that. But man, things were hard and many choices were driven by immediate needs over long term planning; this hurt income for a long, long time.
I've been there, solidarity for cheap furniture based maintainence windows.
Get Windscribe VPN Today (Review, Video)
How do you secure it?

People steal Amazon packages regularly, I think they would not hesitate to steal something that says "Instacart" on it.
Do it for fun but don't fool yourself into believing you can do it better unless you want the game engine to be your product. Of course there are some special mechanics that require a novel engine but those are usually quite rare.
Coming soon! https://www.verizon.com/support/residential/internet/getting...

How long have they been saying that now? Five years? Ten years? Probably about ten years.
Location: Bishkek, Kyrgyz Republic (from Melbourne, AU)
Remote: Yes
Willing to relocate: Yes, (Australian Citizen)
Technologies: Power BI, SQL, Python (Pandas, ML libraries), R, Azure Data Factory. Data Processing and Analysis

Résumé/CV: https://www.linkedin.com/in/arietd/ email me for a full CV

Email: ariet.dzhumashev@gmail.com

I am a data analyst/ BI consultant with 1 year experience in a Microsoft partnered consulting company (SQL server/Azure/Power BI). Worked on processing and visualising metrics for businesses. Worked client-site for multiple projects, working with clients or other team members is a plus. Projects involved lots of data cleaning, data quality issues and finding insights. Forecasting and Machine learning would be a plus but not essential.
SPAs treat the browser just like any other client. If anything, it's more design-/architecture-consistent.

- iOS speaks to your JSON server.

- Android speaks to your JSON server.

- CLI speaks to your JSON server.

- Desktop GUI speaks to your JSON server.

- Other machines speak to your JSON server.

Meanwhile...

- Browsers use browser-specific html endpoints to utilize a historical quirk where they render UI markup sent over the wire that the server has to generate, and now you're dealing with UI concerns on both the server and webclient instead of just dealing with biz-logic and data and the server.

I find it very hard to see how this is somehow what avoids duplicating logic on server/client and conflating concerns.
Shoplifting and drug dealing aren't going to get you 18 months unless you have prior convictions or are a kingpin.

B&E also causes psychological harm to the people whose house you invaded so that increases its severity over a simple theft.
Tesla touchscreen wiper controls land driver with fine after crash
Modelled: Complex Chemistry from Compressive Shearing
Kicking Off the Slow Software Movement
Good idea. But then why not use one of the already available statically/strictly typed languages which compile to Lua or LuaJIT bytecode? See https://github.com/hengestone/lua-languages
I think it’s worth pointing out that abandoning the gold standard had little to do with gold and everything to do with the practice of fractional reserve banking. The government simply had more foreign dollar debt than they had backed by gold, and foreign governments began to demand redemption of their dollars for gold. It wouldn’t matter what the reserve is, fractional reserve banking inevitably results in bank runs.

Nixon had to either devalue the dollar or completely default, and he chose to default and abandon fractional reserve banking altogether (though at the time promised it was only a temporary suspension of gold redemptions).
> It fails for x-y when x and y are close. Subtraction is the easiest way to get big floating point errors.

And note: addition might be subtraction, while subtraction might be addition.

Consider x=1.0 and y=-0.99999.

x + y = 0.00001

You did addition, but you got cancellation error. The only solution is to sort the numbers from largest to smallest dynamically during runtime.
Obligatory Dwight Schrute quote:

“Would I ever leave this company? Look, I'm all about loyalty. In fact, I feel like part of what I'm being paid for here is my loyalty. But if there were somewhere else that valued loyalty more highly, I'm going wherever they value loyalty the most.”
Blackstone Reaches $4.7B Deal to Buy Ancestry.com
'strongly typed language increases the productivity' How was this tested? Was there a control group? I would argue that currently Javascript and Python have been greatly improving the productivity. The type system works well in the maintenance, API definitions and 'no unit tests' scenarios, but when you have to do something you don't have yet any clue about -for exmple at the start of a years long app development project, the type system is just in the way.
Very similar, yes
Last-minute leaker ruins entire Samsung Galaxy Unpacked Line up
My impression was cranelift doesn't improve compile time by enough to lift rustc out of the "slow" category, and borrowck isn't usually the expensive part of compilation.
To be precise, you can't eat gold.

But unless we are in global civilization ending circumstances gold is good longterm bet, physical gold though.

If solar flare wipes out all electronics, your 100tons of gold in Switzerland are meaningless.
It is worth re-posting this, and re-reading Wirth's works every couple of years. The module concept of Oberon's predecessor Modula-2 is still unrivalled today: .def modules that specify the interface and that can be compiled separately from their .mod implementations, which may not even exist when a client application can already be coded against the compiled interface in a type-safe way.

Also, Wirth's book Compilerbau (in German, not sure if it was translated) is a piece of pristine clarity; at just ~100 pages in pocket paperback form, everyone reading it immediately feels writing a compiler or byte-code interpreter is simple and they can do it.
True! I remember using OWA in my university around 2003, before the first invites for Gmail went out.

You could switch to the horrendous non-Ajax interface.

I never realized that before, always thought Gmail was the first Ajax webapp.
> how such a trade happened in layman's terms

Lots of functional market participants, e.g. oil refiners, don’t precisely time their trades. Their jobs don’t reward getting the best price at a given second. But they do reward getting cheap trades and punish getting the worst price in a day.

One solution is to trade at a standard future price. “Give me the closing price and a 50% commission cut” is a common order. In some markets it can be the dominant order type. That causes low liquidity during the day and lots of it at a single instance: the close.

These oil markets close at 2:30PM. Say a bank got an order, at Noon, to sell at the close $1bn of oil. It’s 12:01PM and oil is at $15. The bank could wait until the close and trade all $1bn. The bank makes its commission. But there is a risk the whole amount won’t be able to be sold at that instance. In that case, the bank would be left holding the bag for the balance. So it hedges.

At 12:30 it sells $100mm. This nudges the price to $10. The bank sells another $100mm. Price moves to zero. Bank sells another $100mm. Price goes to -$10. Bank sells another $100mm, thereby paying to offload oil. Price moves to -$20. By the time the close comes around, the price might be -$25. The bank pays its blended price, which may be -$10. But the customer paid -$25, so the bank makes 15.

In the equity markets, this is addressed with VWAP [1]. The volume weighted average price at which the stock traded during the day. More difficult to game. But more expensive to implement and thus execute.

[1] https://www.investopedia.com/terms/v/vwap.asp
In case you missed this post and the previous ones, here's the news: this labour is gone on the JVM. The GCs in JDK 14-15 are good enough pretty much out of the box, and they're getting better very quickly now.

OTOH, if you think other languages let you do away with a GC without pretty significant extra work, especially in concurrent systems, well, then you haven't had experience with those languages.
Whenever I see this sort of reaction, I suspect the person making it lacks understanding of what a "disorder" is.

A disorder is not an excuse for one's behavior.

A disorder just means, hey, there's something here that's out of the normal. A recognition of something that people struggle with.

Does Levandowski have some kind of disorder? I really have no opinion; I haven't followed this case and refrain from amateur diagnoses in general.

But it is not normal to steal hundreds of millions of dollars (or hundreds of millions of dollars worth of things) and if a person has a longstanding pattern of shitty behavior then yeah, there's something going on there that's worth figuring out.
Great comeback. Pretty funny that you seriously think "professional musicians" don't use BT headsets when listening to music on their phones.
Well I think that's the crux of the issue, i've been using the term reproducible build to mean something different for the last 25 years. I'm after functional equivalence not binary equivalence. Now it might be impossible to guarantee one without the other, but that's all I care about.
Although it does not surprise me one bit that you express such a sentiment as it is likely the most common one from that perspective; it is the result of the whole tech industry and even economy that is and has long been a kind of extreme mania of permissiveness and pillage, with next to no push back that would have possibly moderated such behavior, both on a systemic and the personal level that this is an example of. I know that being faced with such a reality will both be instinctually rejected by many as it is a threat to their frame of mind and causes cognitive dissonance just even hearing it, and some will simply not even have the ability to integrate it at all.

What, just from looking at all the massive and excessive fraud and graft and "disruption", aka, destruction, of the economy that we have just alone witnessed in our lifetime that is any different than what Levandowski thought he could maybe also get away with on an individual level. He just didn't realize he had to diffuse what he was doing and not make himself an individual and identifiable target.

Just alone China has been pillaging and stealing in every conceivable manner over just the last 25 years or so; from all out hacking, to buying up tech companies and IP, to placing engineers in our Universities Inc., to basic industrial espionage, to immigration to place industrial spies in our tech companies, and on and on and on … to little more than the muted chirp of crickets.

What would make Levandowski think that he could not have gotten away with what he was doing when we have witnessed nothing but the very same kinds of law and ethical and moral depravity all across the board from top to bottom, left to right, and front to back for decades now? Tech companies have perverted and sold out our whole society as a function of even deeper graft and corruption for many decades now, I am not at all surprised that Levandowski thought he too could get a piece of action; he just made the mistake of not running in a pack like in DC or on "Wall Street" on in the tech sector. He stood out and strayed from the pack in a noticeable manner so they needed to pick him off to avoid wider recognition of what is really going on as we careen off the rails.

To put a point on it, it is precisely the utterly permissive, corrupt, and rotten state of not only the whole tech industry; but our whole society and failed and inherently illegitimate government that are the cause of someone like him thinking he could get away with what he did. Because let's be frank, it was a solid bed that he would have gotten away with it considering what everyone else has gotten away with for many decades now.