skysight-inc/HackerNews huggingface dataset:
Yes, double-free and use-after-free are no end of trouble in C programs (and, incidentally, vanishingly rare in C++ programs), but this thread is specifically about leaks in C and in GC languages (and which are also vanishingly rare in C++ programs).
Ok, this proves that at least one other person thought this sounded strange; I thought maybe I was missing some minutia since I'm just some goofy American.
> This is abusing the borrow checker as a bad linter. Range undermines the story of lifetimes and ownership, making the borrow checker feel arbitrary.

This is the key part. You really shouldn't try to "censor" the math to "help" users. It just causes more pain.

I'm recently been annoyed with the push back against "DynSized" again, which IMO is a symptom of the same thing. "DynSized" is the natural way to generalize Rust's notions of size/layout so we can implement custom DSTs, but people are scared of another ?Trait making Rust "more difficult" or "more complicated", so we're going to get some crapped up epicycles plan if we get anything at all.

-------

Incidentally the Jonothan blow quote below is full 180 misapplied. The issue is people trying to dial back something, not push it to it's natural conclusion, because they don't like the natural conclusion. Too bad, don't do that.
"Better" is subjective, not something that can be verified. But anyway, people do have a way to try out an idea: they can implement it themselves!
I'm not totally happy with Substack, but it's easy to use and takes no time to set up. Also, I think their core idea is that most posts can really be reduced to a dense email, and if we make it easy to send those, we'll do great.
This seems easy to test and verify: uploading face pictures with a beige background and see what the algorithm picks up.
The lack of a stable Rust ABI doesn't have any relation to the ability to evolve the Range type.
No, because at least on iOS the pop-up has a button for allow and a button for deny and the app must function wether you allow or deny, it can only disable related functionality.
Be the change you wish to find in the couch.
GetAyuda, Proudly Established in 2020
Why <is> Snowden in Russia?

It seems clear that the release of the material was endorsed by Russia, whether they knew about it or not. Trump is not demanding his return. And Russia is not going to send him back because it would show a bad example for anybody else contemplating "doing a Snowden".
> Modern C is very different from K&R C.

Aside from some syntax around function prototypes, it's really not, unless you are counting "people tend to use certain things less often" as how you're counting that difference.
Rust has specialization but I don't think you can change the signature like that. In C++ of course it's the callee that decides how arguments are passed.

But it would also be uncommon in C++ to specialize to pass by value. Generic code normally just passes T by reference, ex. max, push_back. Since this is transparent to the caller in C++ though, you don't have to write the &s.
This is terrifying! At least with Google's fiber, you have to buy their connection for them to spy on you. With sidewalk, who knows how much data Amazon can scoop up just by devices broadcasting their capabilities.
You are aware that the standard library is a big part of the C specification, right?
> The due diligence you're describing is only necessary because the custodians can actually improperly handle the money. Embezzlement is a real thing in the traditional system.

Due diligence with loans has nothing to do with 'embezzlement' and everything to do with evaluating the creditor's probability of repayment from future earnings. You can't assess whether someone's business plan is high or low risk with a smart contract.

Embezzlement is more likely to be a problem when you're giving your money to a service as obviously shady as Nexo (a website which in addition to having the unusual model of borrowing fiat at 10% to lend it out at 5.9%, pointedly avoids saying where its based even in its legal documents, or what licenses it holds on its 'view licenses' page, but is very keen to promote what licenses and audits its founders' other business has in its marketing material...)
The statement that a company is the "most ethical" is a relative one. It doesn't imply that the company is ethical, or a net good to the world. It simply means that it is relatively better than the others.

> every ad-driven revenue model is at odds with privacy

I agree with this statement (assuming you're talking about personally targeted ads). Believe it or not though, there are ways to be evil that don't require invading people's privacy, and there are a lot of companies out there that engage in this sort of bad behavior.

I'm not saying that Google is perfectly ethical. I'm just saying that the other companies I've worked at have been worse, and that the heuristic of "avoid ad-based business models" won't necessarily steer you in the direction of an ethical career.
https://github.com/cowrie/cowrie
There is nothing sustainable about the current situation, so it seems that this is not a "more important question" but rather a question that needs to be solved in parallel.
Remembering the CDC 6600
Pause a second: I keep seeing the same arguments again and again about Assange. All of them have surfaced and settled. Next step should have been to invent some sort of court where those arguments are debated, dismissed or retained, and we should tally the arguments and determine who’s wrong.

The justice system has existed from before Napoleon and it still seems it’s the fourth wheel of the shopping cart. Its role is to fix things in society by sanctioning malevolent people a posteriori, to prevent them from acting further and discourage candidates to malevolence, and determine where is the line in cases where there is no winner. So when is the last time our justice system fixed anything in our society, and why have we stopped innovating in terms of democratic advances?
Trivial projects yeah. This is not a trivial project.

As for different variants. Two different http pipelines (classic, integrated), OWIN, one obsolete variant of OWIN, whatever is lurking inside .Net core now. WebAPI, MVC, bits of the remains of WCF floating around.

Abandoned bits: WCF, WWF, older OWIN pipelines, SignalR and a huge chunk of open source projects and commercial CLR packages.

It's a shit show it really is.
An AI (GPT-3) Dreams Up Imaginary Artworks That an Artist Creates IRL
Yeh I agree.

He veered off into that Salisbury thing and I agree with him about the quality and some of the stretches made in the BBC output but not his conclusions. Other things are too off piste for me too...

However that does not mean to say his observations are void. I believe he is writing the facts as he sees them (and not fiction), of course there is opinion mixed in...
https://www.sexsex1.com/2020/09/blog-post_20.html
Some platforms such as the JVM allow for recording debuggers which can keep a record of all opcodes executed. So developers can play back a recording and step forward and back in time to observe state changes.
This always reminds me of Trentemoller's music video honoring that flight (and the aforesaid mammal): https://www.youtube.com/watch?v=zDZPxvO1ftY
Of course you are right, but some commonly accepted procedure nowadays is to do that automatically with a redirect, as a service for the user. Sure, you may have a reason for not to do so, but instead of dismissing a valid argument you could maybe explain why not ...

Edit: On second thought, I recognize this whole subthread started with the wrong tone ("ironic", "reckless"), kind of dismissive or patronizing and not calling for a constructive discussion, so please disregard this comment of mine, sorry.
Same, Devolver is phenomenal. Enter the Gungeon and Fall Guys are both smash hits too
Have you ever considered getting a Jepsen test done for kivaloo? The claims re: durability and linearizability are worth proving out that way
Every time I read "We value your privacy" I want to throw something at my computer screen.
The amount of dark patterns and dishonesty in targeted advertising is astonishing.
6 generations ago the earth had 1 billion people, we're closer to 8 billion now. What happened? Haber Bosch.

We can't go back without a massive reduction in population.
You're missing the point; the point is that it's only bad when it's used instead of (say) disabling SSH if it's not needed, or using the latest release, or using secure ciphers.

Doing all of the above as well as changing your sshd port will only improve your posture.
Followup to this story which was quite popular about a year ago:

https://news.ycombinator.com/item?id=21161043

Very little new information unfortunately. No proof either way, other than the way he's been playing is nearly impossible mathematically.
... and unrelatedly, on the other side, the latest appeasing thing called WSL was made from leftovers of a plan to run Android on Windows Phones, which was dropped when Google refused to allow Play Services run there.
> If he doesn't feel like public feedback would be helpful, then why is he streaming about it? That doesn't make any sense at all.

He _does_ take feedback from the public. That is, from people who take him seriously and participate in the conversation.

The compiler _is_ released in a closed beta. You could be a part of that if you were a productive voice in his language design discussions.

Instead, you're condescending:

> I can make a python script that prints out stuff while I'm streaming, too. He hasn't demonstrated squat.

> He's a game designer. He's released games. If he wants to talk about games design, I'm all ears.

Why would _anyone_ want to hear your ideas on their language if you believe these statements?

He's provided hours and hours of discussion on Jai and language design, explained most decisions he's taken and changes he's made since the inception of the language, documented the language's journey, _paid_ for people to work on the language, and we get to read "he could be faking it?" Yeah, he faked compiling programs with literal input from Twitch chat. The guy's a magician, not a programmer.
The syntax sort of looks the same but it isn't the same or "fine" if what you want is "dynamic scoping" (as dynamic scoping clearly is a way to scope things, not a way to set things). Is "thread local storage" the same as "state threading"? No. Does it look vaguely similar? Sure. Is "function argument binding" the same as "currying"? No. Could you imagine the former providing many of the benefits of the latter, or being how you might implement it? I guess?

I mentioned thread-local storage just because if you are going to develop this you should take that into consideration, as that's a common thing that will burn a lot of people; it was an unrelated code quality point for something you should do if you are going to do this kind of global variable stack thing. You could though use it to build something that was actually scoped by having a generic global dictionary and then keeping the names inside of the functions; at least then you are providing the core base noun of "dynamic scoping".

(And of course, as someone who has spent all of their time programming in C++ coroutines for over a year now, I am well aware that the thread local storage isn't sufficient to make this trick work correctly in every case.)
Reader is like implicit parameters: dynamic scoping with static types. https://dl.acm.org/doi/10.1145/325694.325708
They are currently closed beta testing the compiler, but it isn’t an abstract or imaginary thing.. he works with it all the time on his livestreams on Twitch.
Probably yes, and to be clear I'm not disputing the author's argument that revenue will come to dominate over culture in the long-term.
Must be nice. Personally, if I don't write it down I will probably forget about it. Perhaps I will even forget that there was something worth writing down...

I have been big on journaling for my entire life, though.
No, it's consistent with news sources in the UK having to obey the law about reporting restrictions on cases currently before the courts.

https://www.pinsentmasons.com/out-law/guides/the-sub-judice-...

> Matters are considered to be sub judice (Latin for 'under judgment') once legal proceedings become active.

> Criminal proceedings are deemed active once a person is arrested, a warrant for arrest has been issued, a summons has been issued or a person has been charged and remain active until conviction. Civil proceedings become active, in England, when the hearing date for the trial is arranged and, in Scotland, when the parties' pleadings have been finalised and the record is closed.

> Publication of material which is sub judice comprises contempt of court, a crime which is punishable by a fine of unlimited amount and/or imprisonment for up to two years. Third party costs orders may also be awarded against the media organisation, enabling the courts to recover the costs of any trial aborted as a result of the prejudicial reporting.
So... no link yet.
I would recommend you own your own domain name.

The modern frameworks would be for reusing components, branding, etc.

If you're looking to access a database or apis.
Wouldn't it be more like "I was considering giving you money, but if you're going to make me work for it then I'll reconsider"?
I can't get to the site either, but there are digital die-cutting machines which use a vacuum bed and very precisely controlled knives to cut all kinds of thin flat materials, including textiles and leather. These machines are not cheap, but they are super useful for softgoods, fashion, packaging, etc.
https://www.zund.com/en
I looked through your post history and found this:
"Freedom of speech and rule of law is not conditioned on reciprocity."
I'd like to remind you that the Trump administration asked Assange for the DNC email leaker as a way to discredit the media tying Trump to Russia. Assange is on trial because he wouldn't give the Trump administration that source. Do you still believe what you said?
There are some skills that will help you a lot in your situation. I learned them from a book called Nonviolent Communication by Marshal Rosenberg. My therapist recommended it. I hope you will try reading it.
Yes; I even write down what I say, not only what the other people say; it is challenging when several people sometimes talk at the same time. Ultimately it is a question of practice. I have benefited from the fact that I have been programming for many years before that and write very fast with the ten-finger system.
Good point in the article that barring apps from aggressively tracking users (which is a good thing IMO), creates more power for companies like Facebook/Apple/Google/Amazon that already have access to the data
For someone who ignores him you’re spending a lot of time (27 comments on this post) griping about him.
If you don't have the possibility of taking notes and it is important pop up a recorder on your phone and use it. When you get the chance get over the recording and take notes this time. You will know what you want to write down in retrospective. You can skip through the parts that are not important.
I see that you missed the point about the bracelet. The point was about its method of manufacture, which does not show up anywhere else for tens of millennia.

Are you claiming it was planted?

Denial is good for turf defense, but not so good for truth.
Yeah, definitely looking forward to some DLC content. Did you try it on Supernova difficulty? I beat it pretty easily on the Hard setting, but had to completely change my playing style to get anywhere on Supernova. Went from going in guns blazing to a stealth run.
It's important to note that the only reason that Hollywood went from a vertically integrated system to a disaggregated one is because the US Government filed an antitrust suit that forced the disaggregation [1]. And now that that antitrust pressure is gone, we see Hollywood slowly returning to a vertically integrated system, where studios, distribution networks and theaters are all operating in close conjunction to push movies that "ought" to be profitable [2].

[1]: https://en.wikipedia.org/wiki/United_States_v._Paramount_Pic....

[2]: https://mattstoller.substack.com/p/the-slow-death-of-hollywo...
It's log filtering.

Log filtering has about as much impact on security as having overseas contractors watch your security cameras.
I'm not really happy with Medium but I'm not a huge fan of substack either. Not sure why mailing lists with a blog on the side is seen as superior to a blog with a mailing list on the side.

Coming from somebody who still uses rss, mind you...
The PSL is not a real solution to this threat, though it does protect a lot of high profile websites; it's a useful tool, but by no means a complete solution to subdomain attacks. With cloud platforms like Azure it's possible for a dangling subdomain to be taken over[1], for example; sure, that's preventable, but it still poses a risk.

As I've said in another comment, many educational facilities also offer subdomains or shared hosting space for students and working groups. An attacker with control over evil.student.university.edu could steal university.edu credentials and use them for all kinds of nasty things like identity theft and blackmail.

Theoretically this could be solved by adding all of these domains to the PSL, but there's more universities in the world than people using PSL so good luck with that. You also risk breaking educational utilities with uninformed listings so you'd need a list from the IT facilitators to be sure about listing something in the PSL. I don't think it's going to happen, and I wouldn't assume the PSL is a waterproof security tool for these kinds of risks.

[1]: https://blog.cystack.net/subdomain-takeover-chapter-two-azur...
I’m not involved in any hiring at the moment but feel free to send me your CV with identifiable information redacted and I’ll provide you with some honest feedback. You’ll find my email in my profile
Would it also be a good thing if we also limited the numbers of authors, poets and musicians in the world to the number "strictly necessary"?

Why or why not?

My take on it is that in the absence of omnipotent global co-ordination / allocation of resources that the "surplus" people are basically doing discovery. They are discovering the actual market size, exploring adjacent markets and all sorts of things about executing dog walking apps and apps in general etc.

I don't know if these are "bullshit jobs" or not, I'm not even sure if dog walking apps are necessary at all, but I'm not sure how we all figure that out without a discovery process.

I did enjoy the article, it made me think.
There was a post in here a while ago on this, I think it was this guys company: https://www.google.com/amp/s/singularityhub.com/2017/02/03/t... . Not sure if it ever went anywhere.
I find taking notes helps me to stay focused on what is being discussed especially if it's not a topic I have a particular personal interest or "stake" in. I have found this doubly important in remote meetings as it's easier for your mind to wander slightly when you're physically distant from those who are doing most of the talking.

It's less easy to do if it's a meeting you're deeply involved with yourself as it's hard to note and talk at the same time.
I was looking at this yesterday because of the post on "use of a life" post by cperciva. One thing on the benchmarks was I didn't know what was considered "good" numbers, even though I know it's dependent on the type of workload.

Is there a way to compare it to other key-value stores in a fair apples to apples comparison?
Define disproportionate. Is it not proportionate to the number of citizens?
I personally find it annoying that you can't create a full CPU benchmarking tree from function calls in LuaJIT because the debug information in tail calls is elided. That means you have to guess if a function return went up the stack multiple times and it doesn't always work. So now I'm trying to figure out other ways of profiling my code.
I am genuinely intrigued about how much is costs to commission those tests. They are so complete and thorough that I can't see myself being able to afford one for some project of mine, but I would absolutely like to to have an estimate
> Pyramids are hard to build without a super-feudal economy and society

[citation needed]

The 10th-tallest pyramid was built in Memphis, TN 30 years ago [0] and it's now used as a Bass Pro shop. Say what you will about working conditions in the US in the 90s, but I don't think it'd be fair to call it "a super-feudal economy and society".

[0]: https://en.wikipedia.org/wiki/Memphis_Pyramid
Just upload the CV and ask HN for help :) Usually people have very limited attention span so may be you're missing a short summary with your experience and the current goal?
Sorry, I don't follow your logic at all, nor do I really understand what point you're trying to make.
Postgres 9.5 is still getting updates and bug fixes, each major version has 5 years of support.

If you want to move very slowly and deliberately, you can do, depending on your requirements.

https://www.postgresql.org/docs/9.5/release-9-5-23.html
Frontend dev is a really good example of a field that is all short strings and missing the longer trends. It doesn't matter what framework you use, or no framework at all, if the site can be maintained, the site is fast, and it looks good in all the browsers you are targeting. Bootstrap, jQuery, React, Vue, etc can all be sloppy, or they can be used incisively.
Microfocus did a thing where you could port COBOL TO .NET. I haven't worked with it myself but know Barclays used it to migrate a lot of COBOL in the mid 2000s.
Except that out of that experimentation came Alyx. Everything in that game is outstanding from a technical perspective, the way you interact with the world feels completely natural.

Sure they could have pushed out a VR game every year for the last 5 years to maybe get to the same level of interaction fluidity but they would all feel subpar, not quite there, like the vast majority of other VR games.

Valves strength is that they a have a structure that allows experimentation without a hard deadline, they can afford to throw millions at the wall and see what sticks. This allows themw to take a decade between large, ground breaking projects. They're not beholden to YoY or QoQ growth.

They've had what? Two duds in 20+ years? Not bad when you consider the rest of their output are beloved classics.

Granted they have a good few money printing machines to help them work like this but I would argue that they have these money printing machines because they have the ability to experiment, because of their structure.
Is there somewhere I can nominate kivaloo for some sort of easily understandable code award? Granted I'm a little biased as it looks a lot like code I would write myself, but wow, it's so refreshing to see code that's full of (useful! illuminating!) comments. Thanks cperciva!
IEEE Spectrum did a story on us a few days ago that you might want to check out too:

https://spectrum.ieee.org/energywise/energy/renewables/exclu...
yeah, they are also presumably counting on battery technology doing the Moore's Law thing. I didn't say it was a _great_ idea, just guessing at what their vision is.
Did he say something that offended you? He shares his opinions to people who ask about it. Often his opinions are shared on his livestream - which is an environment he ultimately owns.

I’m a bit shocked at your attitude with this. Your conviction is unnerving. The existence of jai doesn’t prevent the existence of Rust or other languages.
That's right; the process is for long personal meetings with people I know and respect, where we discuss ideas and things we’re curious about.
I understand that, but elementary quantum physics is still grossly past the level of the students and required more advanced theory just to get to that elementary level understanding of the subject.