skysight-inc/HackerNews huggingface dataset:
Depends entirely on threat model. More code is more surface area for vulnerabilities to be found.
About newlines and string literals: why do languages allow newlines in source code to be part of strings? is there some hidden wisdom behind that?

Personally, I would expect that the string

"the quick brown fox
jumps over the lazy dog"

Would be like this in runtime:

"the quick brown fox jumps over the lazy dog"

Whereas this:

"the quick brown fox\n
jumps over the lazy dog"

would be like this in runtime:

"the quick brown fox
jumps over the lazy dog"
In the UK, businesses can claim tax relief for R&D [0] - there may be something similar in the US.

[0] https://www.gov.uk/guidance/corporation-tax-research-and-dev...
“I do not fear death. I had been dead for billions and billions of years before I was born, and had not suffered the slightest inconvenience from it.”

— Mark Twain
Agreed! except a) python does exactly this (which I disagree with but whatever, it's considered acceptable https://softwareengineering.stackexchange.com/questions/1124...) and b) in this case it may be cleanest.
Coin Flipping Robot
I can't believe C binary constant is non standard. It is so easy to solve.

Why can't we extend source transformation? The feature is useful - lisp known for macros, javascript recently got string transformation:

b = s => parseInt(s, 2)
b`101010`
42

Of course this requires changes to the language. Can we solve it with markup [1]?

[1] http://sergeykish.com/c-binary-constants
Ask HN: Tools for seeing how a new project is going to look in a landscape?
There is some proposed large scale construction in my region. I'd like to plonk some rough 3d models onto a 3d Topo map and get an idea of how it will look. Are there any suggestions for tools to do this?
> Just try to keep a handle on reality.

Yes, that's important. And it's also important to always keep in mind the limitations of your models. (That's constantly on people's mind in finance already, by the way.)

> People who play games tend to have a pretty loose grasp on the real world. Especially people who play games with other people's money.

Citation needed, I guess?
From my experience, implementation of time zone conversions is too often wrong. I work with many time zones, and strongly prefer either GMT+0 or “x hours ago”.
I am starting a newsletter on personal finance and investment
Not per se.
> So I'm not going to compromise my privacy just to read seven or eight paragraphs of text in Myriad instead of Helvetica.

uBlock Origin allows specifically blocking external fonts.

> I don't visit websites to marvel at their beauty

Using the right font is rarely about beauty.

Yes, it's often aesthetically pleasing. But good fonts can have lots of practical effects for people, especially those who are disabled or aging.

It's fine for you not to care about fonts and to block them, and it's fine for people to host fonts themselves (if the license allows), but it's misinformed to complain that all non-standard fonts are a meaningless aesthetic contrivance.
I feel you. Nice page though.
You're not everyone's typical customer. Stop generalising personal preferences
Like most people, I am interested in earning money. What I am even more interested in is how not to lose it.

Even with a Ph.D. in Applied Mathematics to finance and fund manager position at a VC firm, I never invested my own money in the financial market until now.

I think many of you are like me: stuck between the "I want to invest" and "I started to invest".

I decided to write a newsletter on the matter. It is called "The Next Wave". Every week I write practical, time-tested insights to help you navigate the stock market with confidence.

I am not posting here to get more subscribers. I am posting to receive feedback. I know the community has high expectations, so I would love to have your thoughts on my first posts.

PS: I am also available on Zoom
The page states that a static build is possible so you'll get a binary you can distribute to any machine at that point.
> it isn't easy to suddenly and accidentally get thrown in jail.

No one accidentally gets thrown in jail, its always an intentional act by another person.

And it is very easy to suddenly get thrown in jail, particularly if you are poor and/or non-white.

> If the violation is minor and non-violent, then by the time it gets to that point, the person will have had many chances to straighten up (more often than not) and simply chose to ignore the warnings.

That's...very much not true. It might be true if you are referring to post-conviction incarceration, it is very much not true when talking about pre-trial confinement as a means of ensuring appearance. Plenty of minor and non-violent offenses are arrestable, rather than merely citable, even if the accused has no prior record.
Ignore downvotes, especially early downvotes. There are some knee-jerk reactions these days.

(But do keep in mind that your initial comment didn't really add anything to any conversation. So it didn't really deserve any upvotes, either.)
The "digital nomad" community certainly isn't limited to Westerners. There are quite a few digital nomads from Arab nations. And though Indians have weak passports and can't travel to too many countries visa-free, you still meet many Indian DNs in e.g. Nepal.
Wasn't Homeland (2011) just a rewarmed חטופים‎ (2010)?
> It’s also one of those policies that I literally can’t force myself to imagine a “pro” argument for.

I have always assumed that the goal was to decrease flight risk for people (from the perspective of the court), thereby allowing larger swaths of people to be released pre-trial.
Seems like every new JS framework comes with new ways to over engineer a simple list / todo app.

Joking aside, im sure this is useful for state management, where it matters.
This story doesn't make any sense, because landing changes to WebKit is just as hard if not harder due to Apple's culture. Going from Gecko to WebKit would not have made it easier for Google to do code drops upstream. In fact, the slower pace of upstreaming into WebKit is one of the reasons why Blink was forked off (years later)
> SRS isn't my main method for learning -- I use a variety of other methods. I only use SRS for (independent and disconnected) atomic-type knowledge that I need to drill. My rep loads are generally not onerous, so it's not a problem that necessarily affects me too much.

Agree. Also agree that actually using something is more important than how good it is. I just strongly object to:

>outdated algorithm corresponding to worse or better results to me is neither here nor there. There's evidence that the repetition interval itself is not the critical factor in retention.

claiming that algorithm does not matter, especially from people without experience actually using both.

>(Example: I learn through cognitive dissonance so I use it primarily to deprogram certain associations in my head. For instance, the word "oficina" looks like "office" to my English brain, but the word actually means "mechanic's workshop" in Portuguese. Or "pretender", which looks like pretend in English, actually means "intend". SRS helps me drill the Portuguese meaning into my skull. I use SRS to memorize bits of knowledge that don't fit anywhere and that are hard to create a context for.)

you look to be describing exactly interference: https://supermemo.guru/wiki/Interference
you might find 20 rules article useful for it: https://www.supermemo.com/en/archives1990-2015/articles/20ru...

>I have looked into SuperMemo in the past because I was attracted to the prospect of a general pro-level memorization tool. I use complex pro tools all the time and was not fazed by the learning curve, but I felt the UI was, let's say, overfitted to the creator's personal preferences.
It was a purely emotional decision but I knew I wouldn't use it regularly, and the best SRS tool is one that one would use over one that one would not.

That is understandable. I will say: I personally like the interface. To anyone reading this, I might seem insane but for a high-level user it just clicks and works (with few quirks here and there). Likely because I lack imagination I can't imagine how I'd make it look nicer while still maximizing usability.

It is of course terrible to share with newcomers. But I've taught many people SuperMemo, I think the main issue with the UI for most people is just that you don't understand it. Once you get over that I think it's not so bad.
jrnsæøe
There are, indeed, very few of them. They just happen to be your employer (Background and credit checks), your landlord (Background and credit checks), and your bank (Credit checks).

I'm not sure Facebook, Google, etc, are quite as capable, or as motivated as any one of those three, when it comes to making your life very uncomfortable.
jejs,sk
I upgraded from a Geforce 460GTX to a Radeon RX560, and I ran into two issues. Nothing major, and I've had worse issues with the Nvidia drivers, but they are still something to be aware of.

The first was that my distro (KDE Neon based on Ubuntu 18.04) shipped an older version of Mesa at the time, which was too old for the AMDGPU driver, so I had to add a PPA with an updated version. Since Neon updated to a 20.04 base, it works straight from a clean install. It also worked with no issues when I switched to openSUSE Leap 15.2.

The second was that DVI output was limited to single-link instead of dual-link. My monitor at the time only supported full 1440p through dual-link DVI or displayport, and the old GPU didn't have displayport. Buying a displayport cable was a quick fix, and I believe the DVI issue is fixed in the driver now.

Aside from those two minor hurdles, it has been smooth sailing, very good OpenGL performance in the games I play.
I respect the simplicity of Chrome's versioning scheme.

99% of people using SemVer actually only have two types of change:

1. "Updating will probably work, but you should test anyway in case we've introduced a regression or you depend on behaviour we've decided was a bug"

2. "Updating might not work, depending on which features you're using, but you should test anyway and you'll be forced to update eventually anyway"

Given users have to respond in the same way to both, why adopt a versioning system that claims 1.12 is greater than 1.2 ?
India is building nuclear power plants which are way more effective in slashing greenhouse gas emissions than solar.

They just started up their first reactor using a domestic design, the IPHWR-700:

> https://en.wikipedia.org/wiki/IPHWR-700
Yeah, DAWs are pretty close, but I was thinking of distribution itself. Basically a PDF, but for music. You don't necessarily need to ship all the original bits to generate the optimised postscript - just the postscript which will display the same thing everywhere.
Look, if you're happy working for Initech for the rest of your life, then no, you probably don't need side projects.
In software development absolutes are always dangerous.
Are Eden / Guys Bar open?
Are you familiar with democratic schools or sudburry schools? They give children near complete freedom and are basically the answer to schooling issues. Unfortunately, they seem to have not spread too widely for issues I don't understand (likely funding and lack of understanding of learning from adults).
Using Psychological Principles to Influence Customers’ Buying Decisions
How much do you hate seeing abandoned carts?

I don’t like them either.

But they are inevitable…just like bounce rates.

When we conducted a research study on Shopping Cart Abandonment Rate, guess what we found?
> Keep in mind, it isn't easy to suddenly and accidentally get thrown in jail.

Have you not paid attention to any protest in the US whatsoever in the past 10-15 years? It's VERY easy to get thrown in jail, even when judges have ruled mere months before that it's illegal for police to keep arresting protesters.
Real WFH Setups from the Real People
The ability to write alternative CLIs on top of Git is often touted as a feature (as well as a defense against criticism of the existing CLI). I'm not terribly excited by save/sync either. But as long as it doesn't have adverse effects, e.g.:

* promotes bad history patterns

* makes it easier to miss when unwanted changes are included

* makes it easy to accidentally push

...I see it as a good thing to have new UI patterns tried out. If nothing else, it can act as a counterpoint to show that the complexity of the Git CLI actually is necessary for some of the flexibility.

EDIT: I see now that "bit save" encourages using single-line commit messages, which to me promotes bad history patterns. That's too bad.
The belief that DNs necessarily pay less than tourists is largely based on stereotypes. In order to be able to focus on work, DNs tend to look for full apartment rentals, often in relatively upscale places where fast and reliable internet is guaranteed. In many countries that means they are already paying less than ordinary backpackers who are staying in hostel accommodation.
This is clearly not a universal truth in the US justice system. It can be very, very simple to be suddenly and through no criminal fault of a defendant’s own that they end up in jail. [1]

1 - source is myself, my clients, and my jurisdiction’s arrest statistics, along with many,many media reports hat prove your point not true.
Yep and lawyers and doctors are two professions with notoriously awful work/life balance.

I have no desire to see that attitude become any further entrenched in software development.
I was looking for something like this. Nice timing and good luck with it.
Maybe I'm just lucky, but I have not had a single issue on Windows with my RX560. I know AMD/ATI drivers used to be horrible on Windows back in the day, but I really think they've gotten a lot better, I'd say on par with Nvidia's.
Polarstern returns home after more than a year in the arctic sea
From what I gather, the focus of PyOxidizer is on enabling you to create executable Python binaries which embed a Python interpreter rather than providing Python packaging and dependency management.
''Our Donuts Make You Skinny'' – Reframe Your Value Proposition
Less status updates, more coaching
> The problem is only if you assign a derogatory meaning to the word liability

That's only true if you assign an appropriate meaning to the word derogatory.
I don’t quite understand what sync does. Regarding save, I think I don’t want the auto-amend functionality.

If sync does pull and rebase then that’s very nice.
> It’s a liability in the sense that a rusty drain pipe covered in duct tape is a liability. You think of it as the source of your problems, but throwing it away would be worse.

So in your analogy, what's the software equivalent of replacing the drain pipe?
I like the look of Overmind, the website is great as are your videos. I hope it gets more traction because the values you describe are important and underappreciated.

I'm a big fan of Mobx State Tree but have begun to hit a wall.

I'm currently dealing with TypeScript compilation time issues due to the complexity of the types MobxStateTree employs and thus have to face the fact that I can't rely on it to express my application without tiptoeing over circular type performance holes.
I’ve been really enjoying masterclass in general. I was half thinking it was just a terrible Facebook scam to start with, but they’ve got really good people. Ron Howard’s directing class is so interesting.
He is an entertainer and knows how to maximize value against amateurs, of which there are a lot in tournaments, hence where most of his winnings are from.

In online short-handed (6 or less) cash poker against the online pros he is the "fish".
It's harder to evaluate a new programmer's abilities because you (every hiring institution) have to do it yourself in a limited time.

An institution that's hiring fresh lawyers or fresh doctors can piggyback on the extensive, rigorous and difficult evaluation (which costs a lot of time and effort both for the candidate and the evaluator) during the bar qualification, medical licensing examination, etc. For example, if a potential doctor is a board certified proctologist(colorectal surgeon), then you can just assume that they will be able to do proctology to a high standard, you don't need to (and likely even can't) verify that aspect of the candidate. (Though employment of doctors itself is quite different from how hiring normal employees work, they're often more like independent contractors or running their own practices)

If an institution is hiring a fresh software developer, then a CS diploma does not even reliably guarantee that they know the basics of software engineering (e.g. see yesterday's discussion in HN https://news.ycombinator.com/item?id=24740765 ) - so you have to do all the evaluation yourself, and neither you nor the candidate would be willing to spend as much time and effort on that evaluation as a lawyer or doctor does, so it definitely is trickier to evaluate since you don't (can't) have enough information.
From a non-US person, the whole Bounty system, now that is where things truly hit the Blade-Runner-esque dystopia level.
My experience is 180° opposite to what you describe.

I never had a mentionable issue with AMD cards since switching to the open source driver approx. a decade ago. I have a NVIDIA 1060 card in my workstation for CUDA - every single time I put it in running state again, I have a realistic chance of completely borking my system.

In fact I had an AMD card installed after the first two incidents, simply to have at least a chance of having working video output when the NVIDIA driver once again doesn't want to talk to the kernel.

That and the whole practical implications and idealistic differences of having an (mostly) open source driver vs. a (mostly) closed source driver (I think we can agree that the open source NVIDIA driver is out of the discussion).

Obviously you might run into problems if you try to run very recent hardware right after availability. Kernel driver development is not ideal for cutting edge hardware and some things might break and it might need some time for your distro to ship the newest kernel/driver.
> It should be relative to your ability to pay

No, it shouldn't. It could be based on a TON of other things instead: take the ID, passport, driver's license, legally prevent them from leaving the city, etc etc.

Obviously, none of them are perfect, but I don't think they are generally worse than ability to pay. Especially for rich people, ability to pay bail means nothing, so they could very easily leave the country if none of those other interdictions are set anyway.

So the bail system it's really just an oppression tool against the poor. Not unlike debtors' prisons, really.

https://en.wikipedia.org/wiki/Debtors%27_prison
I carry a "missing link" and small chain link removal tool with me in a little pouch attached to my bike so that I can be ready for a chain break (also a spare tyre tube and tyre removal tools).

My e-bike _really_ likes to eat chains. I've had it for 2 years and I'm on my third chain now. I don't do anything fancy, just ride it for 7km on pretty flat bike paths twice a day for around half the working year (so I'd estimate I've done ~2100km on it so far).
Scrolling is stealing our time.
People in the 21st century need to process huge volumes of information in order to effectively manage the processes of life.

The larger these volumes, the more often there is a need to remember where you saw some interesting article or flip through the correspondence in search of an important message.

It really takes a lot of time to reread yesterday's conversations to find what was important. And also remember where you saw the key information if you forgot to save it to yourself.

Have you faced the same difficulties in your life, and is it important for you to solve this problem?
Why is there a Makefile? Can that not be done in the build.rs?
The main boon of Redux et al in my experience is that they impose some rules as to where and how state changers are handled, meaning less weird inconsistencies when working in a team (especielly if the team members change over time).
This font could also be a good fallback to your preferred monospace font. My OS fallback to a non-monospace language which sometimes gets really hairy to work with on some characters.
If you want to learn more about the US judicial and prison system you should listen to the third season of Serial.

>Serial is heading back to court. This time, in Cleveland. Not for one extraordinary case; instead, Serial wanted to tackle the whole criminal justice system. To do that we figured we’d need to look at something different: ordinary cases.

>So we did. Inside these ordinary cases we found the troubling machinery of the criminal justice system on full display. We chose Cleveland, because they let us record everywhere — courtrooms, back hallways, judges’ chambers, prosecutors’ offices. And then we followed those cases outside the building, into neighborhoods, into people’s houses, and into prison.

https://serialpodcast.org/
Because nuclear is subject to the same problems as anything else, namely human nature (inc. human stupidity).

https://en.wikipedia.org/wiki/1975_Banqiao_Dam_failure

"The construction of the dams thus emphasized the goal of retaining water and overlooked their capacities to prevent floods, while the quality of the dams was also compromised due to the Great Leap Forward.

Some experts have also pointed out that the Great Leap Forward as well as "Learn from Dazhai in agriculture" severely damaged the ecosystem and forest cover in the region, which was a major cause of the flood, and the government's mishandling of the dam failure, however, further contributed to the casualties."

So shitpile upon shitpile.

Also see https://en.wikipedia.org/wiki/1975_Banqiao_Dam_failure#Whist...

Further "The Chinese government deems the dam failure a natural one as opposed to man-made disaster" so still denying reality.

This is why I am uncomfortable with nuclear, not at all because it's intrinsically unsafe but because it will be done cheapest. And if one country does everything on cost uber alles, it's the US (as a brit we're close behind). Chernobyl happened not because a well-built and well-run reactor unexpectedly went bad.

Incidentally, from same link: "estimated death toll ranging from 85,600 to 240,000" so your quote is towards the upper limit

Additionally, the death toll was again partly due to mismanagement:

"For example, while only 827 out of 6,000 people died in the evacuated community of Shahedian just below Banqiao Dam, half of a total of 36,000 people died in the unevacuated Wencheng commune"

So again the death toll could have been lower if people in charge hadn't been stupid - but they were.
In no way did I mean to imply there are no packages, I just noted they are not yet as mature as compared to web frameworks/packages in other langs.
> - Wholesale electricity prices in Poland are actually higher than in e.g. Germany.

Wholesale prices in Germany are anything but stable. We have often times where the price is negative and on the other hand sometimes exceeds hundreds of Euros per MWh.

Germany has allegedly 50% renewables in their electricity mix, yet they have one of the highest specific CO2 emissions per kWh in Europe, plus the highest prices.

If you want a positive example, you have to use France.

For comparison:

- France: 17 Cents per kWh, 50 grams CO2 per kWh on average

- Germany: 31 Cents per kWh, 401 grams per kWh on average

Also, the wholesale electricity price is irrelevant to the customer, especially in Germany where renewables receive a guaranteed price per kWh, _independent_ of the current wholesale price which is why our electricity bills are so high.

Germany is currently planning and building 16 gas plants and even two coal plants, so you shouldn’t take Germany as a positive example for decarbonizing the electricity sector. We aren’t.

I’m very glad Poland and the Netherlands are actually planning to build nuclear power plants.
"GMT"

That alone hints you're either working in the UK or you're confusing GMT with UTC, or both.