skysight-inc/HackerNews huggingface dataset:
> I'd argue that diffs in the presence of renames aren't natural

That is true, at least for the text-based diff(1) formats, though obviously nothing precludes extending the format, or even using something else entirely (aside from the risk of not being compatible with diff(1), but then you could always present diff(1) compatible diffs externally and use something richer internally, for instance).

> git handles them better than other version control systems.

But that is not.

> That is, git is content-based and not named-based. Name-based systems explicitly track renames with metadata; git does not. git calculates renames dynamically based on content.

And as a result regularly fucks up tracking renames, or plain refuses to do it without nonsensical workarounds if you copied or moved a file and modified it in the same commit. It also makes browsing histories, blaming, or tracking merges through renames incredibly expensive.
They are mutually exclusive. Tesla's ideas were grounded in real experiments and observations. Kooks live in a fantasy world. Pais is the latter. If you don't have a nose for physics psuedoscience, then ask yourself these questions:

- Is it an outsider?
- Is there a conspiracy to explain why their revolutionary ideas are not accepted by mainstream?
- Do they operate outside of or attack the peer review process?
- Is there one clear egomaniacal leader with a cult of personality?

There are some truly out there ideas in astrophysics and electromagnetics right now (look up magnetic monopoles, as an example). All the ones worth anything are published in peer reviewed journals.
I seriously don't understand the cookie hooplah. You know that they can still send most of the same information off to 3rd party services on the back end?
I'm surprised you took my comment as partisan but yes that would be included under the umbrella of "all classified documents"
From a couple web searches, there aren't too many people involved in "Quantum Vacuum Engineering."
That's just one of the many things you can hear without a smoker's cough.
> Every time they do, that resets the clock on when the repo ages out of the index.

Sorry, what resets the clock?
If you are interested in some code and more examples: http://blog.rabidgremlin.com/2014/12/09/procedural-content-g...
There are also some biker clubs (unclear if "legit" or not) that do outreach for abused children.

If you're being beaten or molested or whatever, you can call them, a bunch of bikers show up and conspicuously hang out with you for a bit. The implication is that you have friends in low places so if you just said the word...

CPS is incompetent in my experience (they are auditors, not investigators) so I can imagine how bad it can get for victims to need quasi-legitimate services like this.
> How can two diffs ever be considered equivalent when they include a changed file that had different starting contents? Can they?

In darcs, patches commute. It works nicely sometimes!
Interestingly the first example fails on clang, because of the implicit conversion from `uint8_t` to `int8_t` in the struct.
Not that I believe this Israeli guy in any way whatsoever, but:

Think about it: why would a galactic spanning
organisation be called "Galactic Federation"?

Seems reasonable. Might even be the only reasonable part of the story!

Imagine you were in charge of such a galaxy-spanning organization, encompassing multiple worlds, species, and cultures. Needless to say, communication in general and naming things in particular would be quite the challenge.

Literal names and clarity are probably the primary things you want to really value there.

Particularly if you're in charge of saying "hello" to a new species (humans, in this case) who are likely to find the experience a bit overwhelming. There's more than enough new information for them to absorb, right? Keep things as simple as possible.

Yeah, "Galactic Federation" sounds about right.
Or they just send the data to the 3rd parties on the back-end.
Thank you for your kind words - its really encouraging! Please do let us know when you are trying it out, we'd be happy to help and hear your feedback. You can join our discord (https://supertokens.io/discord) or email me at advait at supertokens [dot] io
The problem is not listening to our body requests. If you are tired, you should you sleep, and then avoid alarms to wake up.
Glad to help.

Btw there is a typo, you need to use "nextract", it's too late to edit it now
> At least on the Macintosh, I find it simply too slow and unstable.

Under "it" you mean Inkscape? GIMP? Blender?
Is there any reason to invest in it instead of jusr buying Bitcoin?

I remember the ,,thin protocol vs thick protocol'' comparisions that said that for Internet it was worth investing in the companies over the internet, as with Bitcoin, just buying it can give a better return.
Neat! Quick feedback point: the pinch zoom works the opposite way from every other program, at least on my MacBook (macOS 10.15.7, Chrome latest, 87.0.4280).
I always wondered how these companies made money. My first suspicion was, that they "fed" stupid retail clients thay had no place in trading to the big fishes.

I learned so much in this thread, making it one of my favorites. And showing again why HN is the great thing it is.

Also, even I wasn't really right, RH and others sure found a way to price and sell an existing service better than incumbents. And in good disruptive tradition seem to have ignored certain regulations.
Those were great. I hung around a forum around 2004 where someone posted a link to jeans he just bought from a smallish online store - the URL contained the PHP session identifier. Thousands of people had instant access to his address + bank information + purchase history, and could place orders for him.
I thought that tracking cookies needed permissions regardless of whether they were first party or 3rd party?
It's pretty limited. Avgas doesn't mean jet fuel, as used by commercial aviation, it means the stuff you pump into piston engine light aircraft. Plus, at the risk of being obvious, the exhaust is either emitted way up in the air or, if at ground level, out in the middle of nowhere at an airport.
> It's analogous to how the difference between 5 and 15 is equal to the difference between 105 and 115.

Patches are torsors? :o
Seems like a good way to differentiate themselves from GitLab: while GitLab is open source whereas GitHub likely will never be, GitLab.com contains many third-party trackers and GitHub now none.
> While the researchers have yet to conduct an actual ‘quantum advantage’ experiment

Seems a little bit premature to declare quantum advantage; it's really kind of in the guise of a funding pitch, no?
And the 10xx generation was on market for a long time, meaning a lot of people (like me) are looking for an upgrade.
Or to distract them into spending time and resources looking into these crazy ideas.

The more evidence there is of “official” support for these ideas, the more effective the distraction.
Commit activity or showing up in a search result.
How Chase Sapphire retained customers
If that’s indeed the case then we should throw the book at them. Breaking the law is different than selling a service for free and monetizing your consumers.
I'm not going to engage with someone who didn't read the original article, nor is familiar with the domain. Sorry.
The Facebook bashing is because Facebook are using a disengenuous argument about small businesses to justify hiding in app survelence you can't opt out of.

Well tough. If they are going to track people so completely then they should be up front about what they're doing and it should be opt-in. I don't want to give money to businesses big or small that what to know that much data about me.

You can still sell your own soul if you want to, the option will still be there, just so long as the rest of us can say no.
Came here to say this. Eliminating Google analytics is unequivocally a good thing. A strong B+ assessment. But the blog doesn't say anything about eliminating _tracking_. Personally, I can live with analysis that's used solely for product improvement. If that's all github is doing, then the score goes up to an A.

But if they're siphoning off data for any other purposes - whether passing to the mother ship or otherwise - then the score is down to D-. The intent of EU cookie regulation is to make tracking and data collection transparent and opt in. Changing the implementation to server side might comply with the letter of the law but it violates the spirit.

It would be good if GitHub would clarify their position.
Ask HN: How do buffer overflows still happen in spite of ASLR?
Forgive me for my lack of lower level knowledge. I am kind of interested to know why in spite of advanced ASLR protection Buffer Overflow and Heap Buffer overflow happen in modern software like Chromium browser, surprising to see so many heap overflow bugs in their bug tracker.

Can someone ELI5 how buffer overflow defeats ASLR?
Going public comes with a lot of work, expectations, obligations, and has a high requirement for corporate maturity. It's not easy, not always desirable, and it's definitely not feasible to do early on most of the time.

I think what we actually want is the ability for us normal people to invest in private companies more easily, rather than for private companies to become public more easily. This is difficult partially due to the SEC and partially due to historic reasons for how private equity is generally allocated and traded, but I'm hoping it gets better some time.

But I share the sentiment, I'm continually disappointed when there's a company I really want to invest in, but I know that I won't get a chance to buy it until 5 years later when it has already 100x'd and then just gets IPO dumped to retail, becoming more of a short-term casino (e.g. see all recent tech IPOs) instead of long-term bet placed intelligently early-on in the race.

If I could purchase shares in anything from Stripe to Discord to even Chik-fil-A (not to mention a certain 10 or so certain YC companies...), I would in a heartbeat (and I'd be willing to pay a premium for this too!), but the privilege likely won't be given to me until I no longer desire it.
I recently filed a bug against a regression in Gcc 9 and 10 switch statements that changed a "bt" instruction to a branch through a 168-byte table. It was fixed for 11, but left in 9 and 10 because Gcc "does not backport optimization regression fixes" apparently because they risk introducing new bugs. ?!

The author of the regression wanted to leave it in place, in 11.
>>The Food and Drug Administration says that some of the vials of Pfizer-BioNTech COVID-19 vaccine being distributed throughout the U.S. contain extra doses and the agency is encouraging hospitals and clinics to use the additional shots to speed up the nationwide immunization campaign.

The agency issued the guidance Wednesday after health care workers reported throwing out the excess vaccine, fearing it would be against the rules to use it.<<

-----------------------------------------------------------

Questions arise in this case, such as Why the extra volume in some vials, where did it come from.

what is the effect on concentration of active components, and the final dilution to an individual dosage.

do these "extra" doses contain elevated amounts of settled components?

by extension approximately 2 doses of 7 out of a vial labled as 5 doses are off lable usage, in the strictest interpretation of the product lable.
This is sad. Anyone working with larger codebases knows that 99% of the time, the code they encounter is years old. It's not uncommon for me to stumble upon files whose last non-trivial change was 3 or 7 years ago... Of course other files get more regular updates, but this translates to entire repositories as well, especially in languages where smaller libraries are encouraged. I'm sure that even among github's gem dependency tree, there are open source dependencies that haven't seen changes less than 1 year ago. To say these are irrelevant is just wrong.

Github's search already sucks quite a lot, but for some things it's extremely useful. For example, when I'm interested where my Rust library is used, I can use the toml filetype restriction and search for the name of my library. It will show up way more results than the projects published to crates.io as those projects are only a tiny subset. These projects might not see extremely regular updates, but I consider them still relevant information. I want it to be my choice whether to discard them or not.
Cue Zed Shaw and "The ACL Is Dead"...

I once worked on a project for flexible authorization called "SecureKit" which attempted to be a common criteria evaluated system for any kind of authorization. It quickly became apparent that it would pretty much have to be Turing complete to satisfy the general case.

For example, some systems anyone can authenticate when a fire is occurring in some other areas, but normally only a certain set of people can have access to it.
0 examples of excellent quality are not better than 523 examples of bad quality.

Often I don't know what particular repo I'm interested in as a model of good quality overall, I just want to see "where has anyone used function X?". If examples aren't in the library itself, then you have to look for projects that use it, github is the best player in town.

It's funny that we have different experiences - I guess I use more niche libraries than you (or am worse at understanding other people's code)? For more mainstream stuff (javascript questions) I can e.g. go straight to MDN. For questions about the Unity game engine I'll often find good examples in their documentation, but for weirdo game engines random projects on github can be a lifesaver.
This is why I'm really excited about the potential of Pijul. In pijul, commits are diffs, and you avoid all of the rebase/cherry-picking craziness of Git.

Still alpha software, so tons of roughs edges, but the potential is incredible. I think it'll be similar to the centralized -> distributed revolution that git ushered in.
I suspect the same will be true about artificial light. Our sleep cycles changed dramatically with the introduction of electric light.

A few years back I built an automated lighting system [1] for my apartment that was basically a scaled-up version of a light-based alarm clock [2]. I got the expected benefit, getting up more easily in the morning. But it turned out the bigger benefit was going to sleep at a more regular hour thanks to lights that dimmed in the evening. It turned out that previously I just wasn't a responsible lightswitch user: if the lights were on and I was doing something interesting, I'd blow my sleep schedule out. Now, though, that almost never happens. I think it's had significant mood and health benefits.

For those interested, the history podcast BackStory had a great set of stories on how time and sleep have changed in the industrial era. [3] I expect we'll be undoing a lot of that over coming decades.

[1] https://github.com/wpietri/sunrise

[2] an older version of this: https://www.amazon.com/Philips-Simulation-Headspace-Subscrip...

[3] https://www.backstoryradio.org/shows/on-the-clock-4/
Vast numbers of perfectly servicable computer hardware is thrown out all the time. We would be well served to use this time to get used to reusing and extending the life of the hardware we already have. And, as software engineers, we need to reign in our reckless disregard for performance concerns to ensure that hardware remains useful, longer.
BTW, if it's immediately obvious to me that the next development in this technology will be for mask wearers to dynamically load new randomly generated faces (and even facial shapes and feature types) at whim, then I'm damn sure others will already be working on the problem of actually developing the technology.

It seems to me that the cat's now out of the bag thanks to unfettered/unregulated access to facial recognition by all and sundry.
If another cryptocurrency rises to overtake Bitcoin, or even just grow larger, Coinbase will profit from that (assuming they support it) vs Bitcoin.
Cloudflare: Are you planning on making the Docs pages available on Github? They 404 despite having links:

https://github.com/cloudflare/pages-docs/blob/master/src/con...

My interest is looking at how you do things for the Gatsby node structure.
> Free (as in 'free beer') is not the same as FOSS.

Who said it was?

Chrome, Safari, Firefox are all primarily FOSS - they have some proprietary trademark and minor components, but the actual browser core in each is FOSS.
Essential Customer Satisfaction Metrics to Track
A snapshot is easy to understand. It's just the contents of a file at a point in time.

Diffs can have different definitions, and I've never seen a complete rigorous one for whatever git uses, if anything. Loosely a "diff" is the changes between one version an another. But to understand what cherry-pick does, we (or maybe just I) need more than a loose definition.

Using snapshots makes `rebase` trivial. The contents of a commit doesn't change. Just the link to its predecessor. Using a diff model, it requires all kinds of fancy changes.
Alright, so this gets in the weeds.

GDPR does not supercede the ePD. The ePD is, according to its own text, a law that extends the general privacy regulations to certain aspects of internet technology. So in many cases it defers out to the general privacy law in effect.

When ePD was passed, that law was the DPD, Data Privacy Directive. When GDPR was passed, all ePD references to the DPD became references to GDPR instead (this is Article 94 of GDPR). But ePD remains entirely in effect, just with updated references.

Most importantly, ePD requires Consent in certain cases, but defers to DPD/GDPR for what is the definition of consent. GDPR's definition of consent is much more stringent.

In cases where the ePD did not refer out to DPD, it remains unchanged by the passage of GDPR. So, according to CNIL, it does not include the one-stop-shop mechanism. See section "The competence of the CNIL" in the link below:

https://www.cnil.fr/en/cookies-financial-penalties-60-millio...
The term "EEE" gets misused so often that it has lost most of its original meaning. "Embrace, extend, and extinguish" refers to a specific strategy by Microsoft to make incompatible software and push competitors out of the market.

https://en.wikipedia.org/wiki/Embrace,_extend,_and_extinguis...

Taking money does not lead to EEE unless you're taking it for the explicit purpose of making incompatible software. (A person with anti-competitive attitudes doesn't actually need to take money to do this, but it probably helps) The aversion to money is likely coming from somewhere else.
Steam isn't acting as a gatekeeper to anything, yet most developers still find their 30% fee acceptable. Clearly Valve is offering some value to them beyond just processing credit card numbers.
We do not need government intervention to handle relations between companies and their researchers.

There's no 'whistle blowing' there, this is not even remotely on the 'needs intervention' radar.

'The Current Situation' with G and FB is complex, just because there might be some anti-trust issues over here, or some 'bad thing over there', does not mean that 'this issue here' needs intervention or even remedy.

With respect to 'Bias and AI' - companies are pretty self aware of this, and don't mind adjusting. I suggest the best way is to have independent researchers publishing, and letting those facts + some voices do the work. The researcher in question here actually published some work highlighting the challenges of inequality in data and G responded well to that. So that ironically might have been a better model than what they are doing now.
>Sure, if you think that individual right to hoard and safeguard value is better than top down tools to help the economic activity of the country as a whole.

Cantillon effect is real and creates widening gaps in inequality. Printing money and handing it to financiers isn't helping, hasn't helped, and will not help anyone. They're kicking the can down the road.
I am really curious as to what their spend looks like. Is it going to be the SV usual "exactly every extra dollar is spent on marketing" type of a deal? They probably don't need to do that.
If anyone from GitHub is reading this, can you add dedup? I spend a lot of time searching for things on GitHub but sometimes out of 100 pages of results, 80 might be the same file included in different projects.
Common... Let's see some inefficient at-home chip fabs that are competitive!
I'm just in the process of setting up our Auth system now with cognito. It sure is painful! Looks like you guys have everything I need except social login.
I don't quite agree with the author that you need to understand that commits are implemented as snapshots, but yes, you need to understand quite a bit of how git works behind the scenes in order to use it effectively. This is because git tries to hide more than it should, which leads to confusion when things Go Wrong.
Yeah, and for even more context, it was CTO of Github! Wonder what happened there ¯\_(ツ)_/¯
I don't look at it as either.

I simply look at it as a change in code at a location.

The commit ID of that change in the history chain is calculated based on the commit ID before it and the one before that is calculated based on the one before that all the way down to the very first commit.
(Similar conceptually to blockchain)

So if you rebase or cherry pick or anything you will be building on top of a new commit ID so git will calculate a new commit ID for your new commit even though the code change is the same.

It's pretty simple... if you understand that concept you can get 90% of the way there with git.
Yes, but... How much lumpia and stir-fry is going along with the fresh chicken, pork, fish, and rice? My personal anecdote of around a dozen Filipino friends shows me that they're eating their mothers fried food far too often. Preparation matters.
Google is the company that your info gets shared with.

Google being the biggest ad company does not give them the right to surveil all that walks the earth.
>> corporations will throw money at developers who work on it, but by and large, FOSS is done by unpaid people

Money thrown by corporations is what separates successful projects, like Linux, or Apache Spark, or Postgres from niche things that no one knows or care about.

Another common scenario is big corpo developing software for internal use, and then open sourcing it, so that volunteers can do maintenance (e.g. Kubernetes)
That's just it! Nobody is taking him as an impartial authority on anonymous donations. This is science. Nobody has to take anyone else's word. You do the research, you show your work. Go look at the math. Go look at the data. It's right there. Nowak's most famous paper doesn't even involve any data!
Any theoretical galaxy-scale organization welcoming us as a new member is certainly savvy enough to translate things into our language, right?

The moment of first contact with a race of nuclear-armed savages is uh, pretty fraught, I'd imagine.

If I was in charge of that alien delegation, you best believe I'd have a well-rehearsed slide deck translated into the humans' native dialect(s)!

Sincerely,
glrorpoepopo pvivinsinoborpo from gleebinimus alpha
Why does the Navy care about patents?

Why do Skunkworks projects need patents?

This seems totally counterintuitive. Why reveal any details about the work being done?
Not according to the US Constitution:

> The Sixth Amendment to the United States Constitution prohibits increasing the maximum authorized sentence for an offense based on a fact not found by a jury.[1]

You're arguing the judge can essentially ignore the jury's findings on the case, which is the same as not having a jury.

And in this case, the prosecution didn't even bring an indictment for that particular crime. Allowing a judge to both decide which crimes were committed and who is guilty of committing them is not a great idea.

[1] https://en.wikipedia.org/wiki/United_States_constitutional_s...