skysight-inc/HackerNews huggingface dataset:
The arguments of this article are ridiculously bad in my opinion.

Defensive programming does not mean that you ignore errors.
It means that the dev should always expect the worse and decide right away how to deal with it early.

Imagine you have a car that suddenly block and explode each time an unexpected error is encountered. So that you are sure to catch it.

So, you are driving on the highway, then a there a window fuse that blow and because of that your car decide to brake and explode...

Especially in hardware and embedded, you have to expect the unexpected to happen.

Imagine the car will suddenly stop when a lightbulb break or there is a shortcut in windows control. Sure you will know, but you will have 300 000 cars all around the world bricked!
As a side note, this article suggests using assert. Fine, but make sure you know what your assert does, and when it does that, if you have a debug and release build (which I think you probably shouldn't.)

I've spent some time with "offensive" programming in the context of both security (like key leakage) and safety (like firmware integrity). It was just kinda funny thinking about meetings spent determining what we could do if i2c or something wasn't responding, and different approaches to try and fix it, and then a year later going back and saying, ok, if something isn't working, we've got an easy answer. Lockdown and halt boot. Anything seems weird, just stop trying.
not to mention he's gotten almost 2m subscribers in less than a year on ~20 purely engineering focused videos.
It looks like Huang was not the only person accosted by the police in this incident. Again, all these incidences of journalists being "targeted" have a familiar theme: a journalist is embedded within a mob, and the actions of the mob lead police to arrest the mob (including the journalist). From your article:

> Huang was filming a handful of men who had gathered outside the hospital making anti-police statements.

> Huang said she followed deputies who were chasing one of the demonstrators after the small group dispersed. She began recording the protester's arrest when the deputies shouted at her to “back up," she said.

> Sheriff Alex Villanueva refused to apologize for Huang's arrest and accused her of "crossing the line from journalism to activism" by coming too close to the scene of the protester's arrest.

> "In the heat of the moment, when these protesters are calling or chanting for the death of the deputies in the emergency room, she picked the worst time possible to try to get an up-close of the deputies making an arrest," Villanueva said during a news conference on Monday. "And that's on her."
I think this is partly Stockholm syndrome. Having a finite stack will cut off infinite recursion before it consumes the whole memory, and infinite recursion is often an error (e.g. if we get some branching logic wrong, our base case may never be taken). Over time this has become self-reinforcing:

- Recursive algorithms may hit stack limits, which makes them less attractive, so programmers are less likely to choose them

- Error rates presumably remain pretty constant, so this avoidance decreases the proportion of recursive programs that are deliberately so, and increases the proportion of recursive programs that are accidentally so

- Stack limits remain justified, due to how rarely programmers are choosing recursive approaches, and how often stack overflows help us to stop buggy programs

I don't think the 'stops buggy programs' argument is particularly compelling, since that could apply to pretty much any restriction (e.g. we could limit RAM usage to 64K to prevent buggy programms allocating too much, those which want more can edit files in a tempfs; processes should run for no longer than 1 minute, to stop buggy programs, those which need more time can spawn children; etc.).

I appreciate that low-level languages are operating under some pretty tight constraints (both in what's available to them, and the performance their users expect). What I find very strange is how many high-level scripting languages impose such stack limits, and don't even eliminate tail-calls. The raison d'etre for such languages is to be more ergonomic and powerful than bare-metal languages, and they don't mind sacrificing a lot of performance to do so (using interpreters, boxed values, dynamic dispatch, etc.); yet they're somehow fine with inheriting these weird restrictions from C & co.?
Yeah, I remember that.

I never do a separate home partition though, so I ended up with the entire disk in Btrfs. I wasn't paying as much attention as I should have when setting up partitions during installation, and didn't totally understand the implications of using Btrfs back then.

Eventually though, it filled up my entire drive with snapshots, causing me much confusion and many disk full errors until I could figure out what had happened.

That experience turned me off from openSUSE for several years, until I finally started using it (with a more conservative choice of Ext4) again for a few machines a couple years ago.
Alternative Option:

Turn off watch history, then only the videos you explicitly like will affect your recommendations.

Bonus Points:
Use extension to turn off recommended panel on side of videos, then you only see recommendations when you go to home screen.
one of the teams I was on at my previous employer was like this. code review was done in groups on this call as well. Got stuck on something and need another set of eyeballs? Share your screen and pair program on it.

It made working from home a little less solo. You could come and go on the call as you wished it wasn't really required unless it was a team call where certain topics were being discussed that should have everyone (or nearly everyone).
All too true. The biggest challenge Google is struggling through right now is that it's not just impractical, but dangerous for it to continue to behave like a small and scrappy startup.

Behavior patterns that are beneficial for a small company are harmful to a big company. To give a concrete example, "move fast and break things" is fine when you have 100 people relying on you, and should probably be sanctionable (though, in our industry, it is often not outside the context of contracts and pre-arranged agreements) when you have 2 billion people using your system several dozen times a day for critical information, where their lives are materially negatively impacted if that information is false or out-dated.
Check this out: https://www.amazon.science/publications/distdgl-distributed-...
the iphone is your account.
It may seem pedantic, but since this vulnerability is publicly known since months back, and furthermore has been exploited in the wild (according to description in the target article), is it not per definition not a 0day.
This smells of overcomplication turned up to 11.

Can you give me a solid usecase of why not to use djangos templating and use - as per your example - an SSG?

Seems like the usecases are edge cases. Why use Django just to make api calls when smaller and nimbler alternatives abound.

Its no wonder React devs command such a strong hourly fee. They'll mostly be fixing dung with more dung and hooks.

Pardon the rant. Im at a job where no one seems to be listening to my case against react when plain whole JS would do. The code will be verbose but there is no magic or illusion. Anyone from junior intern to senior dev can understand the codebase without much help. Its not that big either.

grrr
Something missing on the list that I found out a few years ago: Hire a personal stylist to help you find what kind of clothing works for you. This is especially helpful to the stereotypical geeky male nerd like me. It helped me a lot to go to a clothing store with this person and learn what works. Friends work too but it was an epiphany for me to hire a pro for this. Money well spent that is still paying off in my ability to dress nicely.
> He was the most genocidal man in history

Who did he genocide?

> responsible for something like 75 million deaths.

"Something like"?

> “Long March 8” is literally worse than calling it The Holocaust Rocket.

Not only is it not worse, but it's nowhere near it. A better analogy would be like naming our rockets, the Delaware Crossing or the Trenton Surprise.

> Anyone else have a problem with that?

Nope. Your propaganda would work better if it wasn't so obvious.
> The episode that was uploaded to Spotify had some cache issues, and it wasn’t working correctly on some devices

Yeah, "cache issues". Sure. The world's largest music streaming service has problems with CDNs.
Tokio 1.0.0 Released
To grow into its valuation, Robinhood needs a lot more customers and a lot more trading. Most of their revenue comes from options trading. This is lucrative for Robinhood, but may not be the most suitable product for most Robinhood customers. As regulators have started pointing out, what's best for Robinhood may not be best for its customers. More on that below.

https://kjlabuz.substack.com/p/57-robinhood-traders-anonymou...
Retail order flow directed to electronic market makers obtains better prices than the NBBO. That's what "price improvement" refers to. The entire controversy here is about how much better than the NBBO Robinhood's prices were.
The article is very explicit about how price improvements aren’t being passed on to the customer to the same degree as other brokerages, because RH demanded higher payments for order flow. I don’t know how to map that to your club analogy, but it definitely does not seem to map to this situation. Maybe a club where there's no cover fee, but all the drinks are 20% more expensive?
I use the Spotify heart button as a "mark as listened" button since there is no listening history on Spotify mobile and Spotify adds songs I have already listened to my Release Radar. However, this means I can't use it to tailor my recommendations since I heart everything I listen to.
I’ve been using this along with the other extensions bundled with VSpaceCode and it has been an awesome experience (and has brought me back to VS Code from Spacemacs). Just want to say thanks for writing this extension and for bringing the magic of Magit to more people.

I didn’t know about the forge features, will check those out.
I thought Interactive Brokers also sold its flow.
It's not your info that people can get, it's your chats, which makes "info" sound like the understatement of the year. Less so the past year that we've been in the same house at all times, but I generally chat with my SO all day long about everything on my messaging app. It's _not_ okay to have years of that history stored on a Russian app server based in Dubai. A security audit doesn't matter. I'll take for granted that the chats get to the server securely before being stored in plain text forever. Even if I could trust the current company to be 100% altruistic, I can't trust that data to be safe with them forever. Through state-sponsored attacks, company sales, new CEOs, new boards, etc.
Show HN: An opinionated architecture for Node/TypeScript apps
Options have expiries, not short positions.

Perhaps what you’re thinking of is a margin call, which you can avoid by leaving cash in your account. If it becomes too expensive you can sell some long positions to cover.
Show HN: Minimal WebRTC conferencing using Flutter (Android, iOS and Native)
Haven’t tried the RYM forums but it’s a really great site for finding music. So glad that it’s still around.
And out of all their catalog, it happened only to the most controversial podcast.
Wimps seem to be exotic particles of unknown structure. My guess is that regular neutrons are enough, so long as they are "fixed" to be stable.
Status pages with custom domain and https? That is the one thing that will make drop Pingdom today.
billion dollar companies are built on providing service to a foss project that has been battle tested to work. its not like that is too far fetched.

what you are saying is network effect is helping companies not allowing a foss competitor because that would cut into their bottom line?

so, i am offering my inputs. all the legal clinics around the world who need software for their day to day management who currently rely on google sheets and excel would love a foss alternative. self hosted would work for them.

the stuff used in house is probably not supposed to be known to your customers/competitors so network effect is out.

remember. tools dont need safeguarding. the knowledge inside does.
this is the answer, before you always had next to a video a list of related videos, now it just personalized recommendations to you, that's the behavior that confirms this
I wish the playlists were better but half the time when I search for a playlist to suit a specific mood, It'll have a minimum of 5000 songs on there which means that the overall average quality of the songs is probably going to be pretty low.

You know that the individual who created the playlist in no way hand curated that list, hell they probably haven't even listened to half the songs that they added to their playlist, much less vetted them.
Actually from what I've heard from Linux distro maintainers (mainly from Fedora) it seems like Apple actually does quite substantial hardware revisions internally without telling anyone as users report that their MacBook 20XX does not work with a Linux distro while another users report that on the paper the same device of the same model year works fine.
IIRC the estimate was about 4 hardware revisions per year.

This really complicates the already limited attempts to run Linux distros on the Mac hardware as users simply can't reliably tell if their hardware will be compatible beforehand.

On the MacOS side they likely paper over the differences, quirks and bugs in firmware and drivers, so the user does not native anything and they can change the hardware underneath as needed.
Unfortunately, "private session" resets every X hours.
I've stated this before and got downvoted in other posts: RobinHood is a gambling platform. It is run fast and loose by its managers.

I am glad the SEC came down on it. This is actually a very minor penalty and more like a slap on the wrist than anything else. But it shows at least that there is some scrutiny of what RH tells its customers.

I have raised FINRA complaints in the past about this company for their poor order handling. I encourage anyone else to do the same when they see something wrong with RH or any other trading platform.

RH needs to massively increase its controls as well as investor education.

I think this penalty is also a massive day of reconing for their business model. They need to move to more of a full service broker - like all the other old-school firms. There's no money in order routing such as this. They need to boost their account size and attract higher quality users focused on investing - not gambling.
Never works for me. Tried with dozens of links and multiple browsers.

Plus paywalls aren't really a problem. 2/3 clicks and they're gone
I think you are asking a legal question? I am not a lawyer, but I can say that some governments in some countries require specific certifications in order to hold certain titles for certain government jobs. Otherwise the answer is yes, you can have whatever title you want provided that title does not imply any legal requirements doctor, lawyer. Your CV and interview with a business will help them determine if you meet the definition of your title. I have phone screened people that listed themselves as Sr/Principal ______ engineer and they could barely Google any of the answers. They won't get in trouble but they also won't get hired.
I wonder what ever happened to Linux-Vserver, which had user namespaces in like 2005.
I've learned that the hard way!
I've been evaluating potential replacements for the Django admin to provide a path for progressive evolution as apps outgrow Django, and have found https://marmelab.com/react-admin/Readme.html -- anyone got other generated admin platforms they like for handling CRUD / mutations?

I think the Django admin is great, I use it a lot and recommend it for new/small projects, but it's tightly coupled to the Django ORM which can be restrictive in some usecases.
The full paper is also out there, circulating on various file upload sites. Your points stand even to the full text.
I do this between my Thinkpad (work) and XPS (personal) laptops. Takes only a few seconds to unplug the cable from from one, and plug in the other, with all peripherals working. IOW, there's no Apple magic here, standards are pretty cool.
> and that was overseas.

in 2010, i was lucky enough to have KFC in beijing. it's a totally different experience, and was absolutely delicious.

once covid stops being a PITA, and travel becomes a reality, i strongly recommend trying out american fast food chains in other countries. i'm almost always surprised w/the quality!
People have intersecting interests. For example, Con Kolivas is an anesthesiologist who is also a Linux kernel hacker.
No, that is not for a specific case of high performance... It's for the non-specific case of keeping the code clear, understandable, and bug-free. The style was chosen for these reasons, not because it is more performant. It just happens to also be more performant than the layers of indirection that also harm understandability.

For a procedural code base, avoid subprocedures that are only called once.

For a pure functional codebase, e.g. Haskell, locally-scoped single-use functions can be beneficial.
There were good things too: stronger friendships, lots of creativity, less crime (not counting corruption, which was rampant), less drugs.

But yes, you're absolutely right, lots of things were quite terrible.
Oddly, I signed up for Spotify family so it would be more affordable for three kids. I spend way more time in Pandora (premium) because after several years of use, it has built up a good idea what I want to listen to. I find Spotify repeats far to often, but that is possibly from my lack of use. I listen to my own music collection more than I listen to Pandora.
Will it be? What makes you say that? I’m a little skeptical because it looks like they are trying to paper over the weaknesses in ARM CPUs by e.g. throwing more cores on a chip, derating competitor’s benchmarks, etc. Not to say it won’t eventually be successful, but the Xeons don’t have a smaller number of bigger cores by accident.
Those buyers are institutional investors and they get a huge discount.
Terragrunt Support in Env0
Hello, env0 and Terragrunt fans alike! It’s new-feature-day, yet again! But this time, we have something really special for you. We’re giving you the ability to completely change the game on the Infrastructure as Code files that you use to deploy and manage environments with our platform! Introducing remote-run support for Terragrunt workflows, now available in env0!
Research this a bit more. It may be within their risk parameters or guidelines. But if you think theres a breach here, you should raise a FINRA complaint.
> Keeping those skills sharp even when you’re not job hunting.

I rather hire someone with wisdom across multiple areas than a bleeding edge expert in few, very narrow specialty.

In my experience, a group of generalists will often deal better with a problem than a group of specialist.
Telegram's getting ads
*ponders if "Obama-era jams" means music that came out during the Obama-administration, or music Obama would have jammed to when he was younger

Both have a lot of potential, as it would seem the former President and I have very similar musical tastes (that is: a very strong love for Stevie Wonder)
Yep, that's Super 3D Noah's Ark

NSFW review: https://www.youtube.com/watch?v=LkNvQYiM6bw
It doesn't suprise me, I've noticed that they've started trying to push political media on Spotify. A couple of weeks ago it was recommending me a new single called "Black Lives Matter" by an artist I'd never heard of, and who only had 46 monthly listeners.
Same issue. Love the concept of saving through a GET link.
Would anyone report it if it was anything else? Seriously it could have happened to 1% of spotify and nobody would notice. All the conspiracy theory nut jobs that watch Jones see a fly move the wrong way and think it's the deep state coming after them
Not if the definition is ‘a known security issue with no patch’
PiHole is a network wide ad blocker that works at the DNS level. Basically you route all of your network's DNS requests through PiHole and it blocks any domains that are known ad/malware domains.
Sennheiser momentums. They sound great, and the fit is good if you have a tiny head and tiny ears. Otherwise you'll be swapping out the pads or not wearing them for more than a few hours.
It’s almost become an anti signal at this point, whenever someone says Mao was responsible for xx millions of deaths you can safely assume that they are easily fooled. There is no serious historian of Chinese history would actually claim a number like that either. Direct responsibility is probably in the thousands range, he was fighting for decades after all, indirectly through 1 degree of separation probably hundreds of thousands, through 2 degrees of separation probably in the low millions if you include the cultural revolution and the very late stages of the famine when he became fully aware of the devastation. 3+ degrees? Perhaps in the 8 digit range, though at that point attributing malice or intent becomes absurd for anyone who understands how Beijing power politics works.
Curious what you mean, more specifically? Django template language seems fine to me, but maybe I haven't used React enough to see where it is better.
It seems that 0d has since become a synonym by some for unpatched exploit.
I specifically choose not to use this. Do not use forks of uBlock Origin. They might sell anytime. It has happened before, it will happen again.

Plus I do not like ad fraud. I get lots of captchas. I also don't wanna give money to Google and Facebook.

If uBO sells out (I don't think gorhill will, but I don't know him) it'll be the top link on HN

https://www.lowyat.net/2020/224264/chromium-versions-nano-ad...

https://arstechnica.com/information-technology/2020/10/popul...
In twitter culture, public defacing seems to be the primary way to help direct things go down the right path. Want to get google down the right path? Publicly call them out for not doing it already and get enough other people to do the same that there’s no option but to loudly comply.
Building a Coin-Operated Crow Feeder (Part 1)
No. It uses oauth and scopes for stuff like playlists and activity.
I'm a Google employee who, I think most would claim is generally on Google's side of things.

He lied. There are falsehoods that he knew (or had a responsibility to know) were false in a public statement he put his name on. They've been repeatedly corrected both by other employees and by data.

Specifically, he at least lied about a 2 week requirement for paper reviews in the internal publication approval process. While that's listed as a further requirement, they don't "normally" require two weeks.

(I wouldn't, for example call the resignation statements lies. Those were unintentional falsehoods)
Google offices are hilariously so badly organized for such an “enlightened“ company - my guess there is no obvious metric to track and “own”, so it falls through the crack.
The hardest part about interviewing is that there is no feedback loop; I once interviewed at 10 companies within 2 weeks and got rejected from all of them, but to this day I still don't know what part I need to improve upon.
Ask HN: Security audit for startup / OSS projects
I run a startup whose code is public and I'd like to have the code audited for vulnerabilities, does anyone know of services that exist to do this that aren't enterprise focused? Even HackerOne has gone full-enterprise in recent years, but it's not only large companies that need these services.
No, it’s a DNS server with blacklisting features. It can’t block traffic, it can only prevent some software from looking up addresses.
I suspect they directly trade the major currency pairs, and trade via USD for minor pairs.