skysight-inc/HackerNews huggingface dataset:
> The presence of _unsafe_ is okay

I don’t think so. It explodes the attack surface. In safe languages like C# or Java there’s no unsafe anywhere, not even in standard libraries. These runtimes are safe all the way down. The only attack surface is the VM itself, but these are very small only a handful of instructions, and are tested and audited really well.

> You can still have memory leaks in GC-d languages by reference cycles.

No, you can’t. All modern garbage collectors collect reference cycles just fine. They don’t just count references; they actually traverse these graphs.
I'm sure some are too young here, but there used to be a thing in California in the 80s called "valley girls," and this is how they talked lol. https://www.youtube.com/watch?v=bIOocUQkfzk

I think the only time I've really heard "hella" in mainstream is No Doubt's "Hella Good" song.

The same was done with "uber," until a company took it for their name. Uber-this and uber-that was all over the place. Rarely hear it now outside of ride sharing.
Every time I do this I get frustrated thinking about the fractions getting smaller and smaller. I don't think I ever solved it perfectly but I was always doing this with tiny pet projects where the order didn't matter much. Next time I'm in this situation and using postgres, I'll try this.
> What is a "pre-made pack"

"I took the last DSQ I got and answered it pretty fully so here's a copy, and I'm not going to waste time answering the weird extra questions your CISO decided to add into the mix"
> side channel attacks.. gain access to privileged data/etc. through unprivileged processes

True, but tbh that's not the first thing I'd reach for. if someone already has pwned your single function or a control plane, then it's usually game over anyway, and escalation sploits are usually a lot easier than a side channel.

Whether AWS has IC or FedRAMP background seems kind of irrelevant to a simple bug bounty program, especially for a trillion dollar company, when I was able to find an escalation vuln in about three minutes in an unfamiliar codebase in a language that wasn't my primary. They should have at least acknowledged and said thanks for the heads-up.
The DB-as-cathedral didn't scale as our volume of data did.

I don't think NoSQL was as much a conscious choice, as much as the only option when even a medium sized business is unable to afford / scale the number of human DBAs they'd need to keep pace.

Everything has a trade-off, and I think we accepted more (accessible, scalable) data >> more (pristine) data.

(And obviously, the tooling around newer technologies has gotten way better, while SQL was already very mature)
Some tech illuminati already offered him to retrieve for 10% of the take.
Yes, I 100% agree with you that “append()” vs “concat()” are certainly no less confusing in their differences than “/=“ vs “+=“ (and the latter are arguably less confusing due to the mnemonic effect you mention).

In fact, to generalize, I think we can fairly say that operator overloads are akin to extremely short function names; in some cases they may work out great when there is not much ambiguity implicit in the underlying problem, but in other cases a longer and more explicitly descriptive name is required to disambiguate. In this case, “append” and “concat” seem quite poor names for different functions, given that they are virtually synonymous and therefore do nothing to describe or distinguish their differences of behavior.

So my claim is that we can do significantly better at resolving ambiguity with carefully named functions (or other approaches) than operators, or tersely/ambiguously named functions (like “append” and “concat”). Of course, this does come at the cost of code verbosity. Just where we should draw the line between too ambiguous vs too verbose, is of course a difficult subjective matter.
In my experience, the latency is just too great on 3G or 4G with congestion.

It's 500ms to 1000ms for something that ought to be instantaneous like clicking on a tab that I have already seen.

React websites might be a larger initial download, but its only an extra 3 seconds wait to begin with, then near instant reactivity afterwards for everything that doesn't require a network call.

Ironically, the browser cache is much faster than 500ms so the tab demo would have been faster if implemented as a full page refresh.
You’re right, I mixed it up with union shop, which is very similar
Show HN: CodeTime – Analyze your coding time
Have you ever heard of the FIRE movement?

Plenty of engineers working at FAANG and investing in index funds have enough money to retire comfortably in their 30s. That’s what the GP means by financial independence, I believe.

Also “senior” engineers (>5 years of experience) at these companies make a lot more than 200k a year.
WhatsApp's encryption scheme was designed by Open Whisper Systems, which is now Signal, and even uses the Signal protocol library: http://www.cdn.whatsapp.net/security/WhatsApp-Security-White...

Of course you got all the metadata going to FB, but it's still a good messenger feature-wise for now, so I'll keep it as a backup in case my favorite privacy-conscious messenger is down again for 10 hours.
I now have this dread that someone has already software-patented that. Something like “automatic ordering based on user recognition”
I don't think you're wrong to be cautious about making science too casual, but I don't think everybody will immediately look at the word "hellabyte" and think "Oh, somebody from the Bay named this"

I can't say it sounds any more silly to me than zettabyte or yottabyte
> multi-master

Wow, so oppressive. #DecoloniseSQL
I would love to see you open source this, or just dump it on GitHub as others mentioned. I'm currently developing a Rust web framework and this would be really helpful!
I like sciter, but this is targeted at compile time desktop environments (and mobile, one day!) right?

Which actually makes it even more amazing, but that explains the 0KB for those who don't recongize the framework by its name :D

Everyone should check out sciter for their next project if you're considering something like Electron, though!

https://sciter.com/
Most of Google's Web front end servers are written in Java, a lot of the backends too.
I'm surprised that this article is not even mentioning one NewSQL DB like:

- Google Spanner

- CockroachDB

- TiDB

- YugabyteDB

- FaunaDB

Can it be that those are so little known by most developers?
There is no mass exodus.

A few companies moved, but they are late stage and very established.

If you have a startup - SV is still the best place in the world.

It's funny to see how much of the world is hoping that SV would fall. Maybe it's just morbid curiosity or paranoia but theres still 10 developers who want to move to the bay area for every developer that wants to move away.
https://www.youtube.com/channel/UCa_MfJER8quGtCJd3MbZzCA
I have a very antagonistic relationship with NoSQL databases because the vast majority of people get nothing out of using one, and yet every resource a newcomer to programming (on the Node.js ecosystem at least) recommends using MongoDB with Mongoose (an ORM for a NoSQL database? Why?), leading them down a path they really have no business walking because they could have instead learned the widely used, time-tested traditional SQL databases.
It's a really bad article, just filled with gibberish starting with its description of SQL and NoSQL. Fortunately the comments here will provide better material.
Facebook can do a faceplant in my cesspool.

We desperately need competition in social media.
Agreed, pro sports is more genetics than anything, you can train till you bleed for years, but if you aren't at least 6 feet plus, no way are you gonna reach the NBA.
> centralized services DO NOT scale

What do you mean by centralized and what makes you think they can’t scale?
Here's an amazing collection of JS donuts created with 140 (or less!!) characters of javascript code each. The rotaring 3D animated ones are my favorites:
https://www.dwitter.net/h/donut
Why? Very few products need sharding, let alone multi-master. Sure a popular social media platform would, but most development in the world is for small to medium scale line-of-business apps. Postgres is _fantastic_ for these.
At the end of the day this is Copy-Left debate all over again

Personally I like it, I see "Open Source" being killed off with Apache, BSD. MIT and other non-copy left licensing, it allows companies like Google, Apple, Amazon, Microsoft and other to leach off of "Open Source" focusing exclusively on dev tools and libraries used to build their products.

This has lead to ALOT of developer growth, and ALOT of Open Source access for Developers but no much growth in END USER software products that are open sourced.

Linux one of the most popular Operating Systems in the world, and is the final product not a development library is as big as it is because of Copy Left, one can make a big case that the BSD's never got to be as big as Linux directly because of their permissive license.
Me too! Its weird to me that people justify slow compilation times by pointing out how much work the compiler needs to do. And yet, if V8 can compile and launch my program in milliseconds, it seems like a similarly designed just-in-time rust compiler/interpretter should be able to do the same thing.

I really hate that I needed to do this, but I recently acknowledged that my 2016 macbook pro just isn't fast enough for rust development to feel good. I replaced it with a ryzen 5800 based desktop workstation for dev work. With my new machine a full build of a rust project I've been working on dropped from 2 minutes down to 20 seconds. Its an absolute delight and I highly recommend doing the same if you're writing rust regularly and can afford it. Hopefully the next few years of CPU improvements will forgive our collective inability to engineer CPU-efficient compilers.
I’d go even a step further and say FAANG companies, despite what their tech blogs might argue, aren’t at all immune from making very dumb decisions or adopting very silly practices. To follow those same ideas blindly could cripple your company.
Yup they're already under 99.9% reliability for the year. Never mind WhatsApp this makes them a questionable replacement for SMS. Not only "was" it a disaster for signal the disaster isn't over.

Reliability is more important than privacy for messaging most of the time. Some major balls are being dropped here.
Show HN: Go-Featureprocessing v1.0.0
What is this?

Fast feature preprocessing in Go with feature parity to sklearn

https://github.com/nikolaydubina/go-featureprocessing

What is new?

Batch, Inplace, Parallel processing; Zero memory allocations; sklearn benchmarks; at lot of benchmarking; cleaned up API and documentation; more realistic mock data.

Thanks!
Give it a call?
I think the only reason you'd use server side JS is you don't know C or C#. I'd be hard pressed to imagine someone who knows a number of server side environments and languages choosing JS as the solution - strong typing and performance are the obvious possible problems, then multi threading performance etc.

The only reason anyone uses JS is the browser constraint, remove that and there are a lot of better solutions.
I created a website and plugin for analyzing programming time. Now it supports jetbrains series editor and vscode editor, welcome to try!

HomePage:https://codetime.datreks.com/

Jetbrains Plugin: https://plugins.jetbrains.com/plugin/15507-codetime

Vscode Plugin: https://marketplace.visualstudio.com/items?itemName=Jannchie...
One problem with the current Rust ecosystem is that you can't really create framework-agnostic solutions because the popular frameworks (actix, rocket, tide, warp) all have different http types (albeit very similar). Unlike other languages like Go, there is not http implementation in the standard library. A standardized http crate would be a huge win for the ecosystem.
There are two kinds of auditors:

- One who will drive you crazy demanding to see things that don’t matter, argue with you over non-issues, think they are way smarter than they are, and just produce a lot of irrelevant paperwork

- One who is barely technically literate but got their CISSP certificate, definitely can’t code, and has never written an exploit in their life. They just want to see a familiar tool name and some checklists.

There are zero kinds of compliance auditors who will ever find an actual vulnerability, and I’d be surprised if they can even explain common basic attacks like SSRF.

The reason is simple. That work is so boring, that if you had any skills at all, you’d be doing more interesting security work.
Yeah, not literal shares. It’s more that a lot of the staffers working for the conservative party (confusingly called the Liberal Party) come from the News Ltd media and mining companies, and a lot of executives of mining/resource companies and journalists and executives at the Nine/Fairfax and News Ltd. duopoly are ex-politicians, political staffers, etc. - lots of revolving doors between them.

For example, the current PM’s chief of staff came straight from Rio Tinto, previous PM Tony Abbot’s chief of staff (Peta Credlin) now has a show on Sky News, as does ex-PM Turnbull’s (Chris Kenny, from when Turnbull was opposition leader), who also writes for The Australian newspaper. On the other side of the duopoly, the chairman of Nine/Fairfax is an ex-Liberal Party treasurer (basically the most powerful cabinet minister apart from the PM), and they held fundraising events for the party at their studios during the last election.

So the media run positive stories about the Government, and downplay or fail to run stories about, for example, serious allegations of corruption against multiple cabinet ministers of the Government, while policy proposals from the opposition are scrutinised far more closely and savagely than actual policy from the actual Government, and often rubbished. The media runs character assassinations against opposition party leaders and MPs and puff pieces about the Government ministers, the PM’s wife and her fashion choices, etc. - it’s pretty shameless.

Then there are links between Government, the media and big business (again, mostly mining here) through a bunch of think tanks like the IPA (extreme far-right), the Sydney Institute, etc.

As long as environmental protections are kept weak enough for the miners, and tax cuts keep being promised for the wealthy, none of them rock the boat.
Is there a way for users to block individual users to reduce some of that noise?
Interesting blog post. Thanks for sharing. This part, in particular, resonated with me:

> Querying data is a little harder. Apache’s Cassandra uses Cassandra Query Language or CQL which, interestingly, does not allow for joins. MongoDB just sends JSON objects in reaction to requests. Need all users in Ohio? MongoDB sends a big chunk of data.

I fondly recall the late night debates with fellow colleagues in the industry, several years ago, when we were pitching a database design to a startup bank in South Africa.

Back then during those fights some even suggested that the NoSQL vs YesSQL debate was a religious war - much like vi vs emacs - but in the case of data storage it quickly became obvious that each philosophy had its respective strengths and weaknesses - which were in turn easy to understand, to sell, and to add value with.

But nowadays I must confess I do not know of many shops using NoSQL, and I suspect it is for the reasons quoted from the blog post that I shared above.

I would love to read your insight if you've been part of a big NoSQL deployment. We struggled to sell it, so I suspect we must have missed out on some interesting opportunities.
I do have a problem with the content of the ads on kids videos - I've seen violence in some of them
When the lockdowns started I sent my relatively old parents to riot.io. They were able to get it working on their phones and tablets pretty well. The only thing we had trouble with was the riot.io-mediated jitsi multi-person video conference setup. But they handled the basic riot.io setup and 1-to-1 stuff fine.
> Virtually all self-made millionaires+ started companies[1]

The article you linked makes no sense related to your claim. Unless you're saying that millionaires+ (whatever the + means) don't exist outside of Forbes.

> There's really no other way to get there

Joining a startup as an early member? Working in finance or computer science or medicine with ridiculous salaries?

Here's a link[1] with thousands of jobs with an average income higher than $100k. If you have that kind of income, you can become a millionaire.

> QOL of working on what you want, commanding your own ship, being financially independent, etc.

How about the QOL of not knowing for a long time whether you'll succeed or fail? Or having to deal with investors, marketing, managing people, aka everything that you probably don't want to be working with? Not commanding your own ship because most of it is built with other people's money?

If you're talking QOL, I don't see how playing the lottery with your future (in your own words) is better than having a high-income job, then FIRE in your 30ies.

[1] https://www1.salary.com/Six-Figure-Income-Salaries.html?page...
I find it very productive to talk about. I’m glad it was the first comment for me.

2013: Their reddit, digg, forum posts went nowhere, their hackernews post hit

2021: Their reddit, twitter, forum posts went nowhere, and neither did their hackernews
Right. I am saying that if the light from my TV reaches me essentially instantaneously, and the audio is on a 10ms delay, that messes with my brain.
You’re just painting caricatures of language designers. Flamebait without substance.
If you have a Secretary
Only if the recipient is in the UK too
Yep, pretty much - but tourist from Earth will feel gravity just as at himo and gondola rides will be 100% authentic! ;-)

No wonder Aria is a perfect slice of life / healing series - any aggressive aliens or other evildoers don't stand a chance agains their rather low profile yet insanely high tech level! :)
The Hopes and Dreams we keep in our Passwords
> the relative frequency of authors with a given number of publications follows a power law that scales with the square of the number of articles published

Please don't count publications. Counting publications is pretty much the worst way to measure anything. Anybody who discusses counting publications in the furtherance of some goal ought to be required to insert the text "yes, I am counting publications, which is the absolute worst metric available, but I doing so because I could not find any other metric."
To be fair, Java has always supported a particular flavor of sum types founded on subtyping: use an abstract class with a private constructor as a base, add nested static final subclasses for the variants, and decide whether to use instanceof or the Visitor pattern to dispatch on each variant. (The Visitor approach corresponds to a certain isomorphism -- the sum type `A + B` is equivalent to `forall T. (A -> T, B -> T) -> T`, where the pair of handlers `(A -> T, B -> T)` is the titular visitor.)

That JEP elaborates on the same ideas (notably using `instanceof` instead), as the linked JEP explains, but the motivation for sealed classes extends to further harmony with subtyping. The major item seems, to me, to be allowing interfaces to be a supertype. A minor but distinctive item is that the sum type's variants can be defined at (some) distance from the base type, rather than all being defined in a single breath.

The problem is, even though you could always express sum types in Java, it's verbose, unpleasant, and above all "clever" in a way unnecessary in other languages. I think this JEP helps somewhat -- the private constructor trick in particular goes away -- but it doesn't really help with clients of your sum type. Pattern matching is still yet to come, and if you want a Visitor, you still need to write a Visitor.

To the grandparent's point, this JEP isn't enough to provide a coherent alternative to checked exceptions or other kinds of structured control flow.
Golang and C# are compiled, yet they both compile fast enough so you unlikely gonna notice compilation time in your edit-test workflow. No practical differences from interpreted languages.
> at grafana labs we are closely following these developments, and are constantly wrestling with decisions around what is best for our own licensing strategy.

It would be great to see a list of pros and cons for approaches taken by ElasticSearch, MongoDB, TimescaleDB regarding licensing.

BTW, we at VictoriaMetrics do not plan to change license for published source code. All the VictoriaMetrics source code is published under Apache 2.0 license [1].

[1] https://github.com/VictoriaMetrics/VictoriaMetrics/blob/mast...
This is the simplest "start here" guide out there: https://learnxinyminutes.com/docs/go/.

For more depth, check out FreeCodeCamp's course: https://youtube.com/watch?v=YS4e4q9oBaU.
The Fedora installer has let you choose between ext4 (and ext3 before it), XFS, and BtrFS for like, more than a decade? This should not really influence your distro choice one way or another.
I think the difference is Node.js really does bring significant advantages that the majority of developers can benefit from (or at the very least consider). It's hype is/was deserved in my opinion.
I think the reason this happens is people have a poor understanding of what is unstructured data.

Most data is going to have predictable structure to it, so you might as well just make it official.

In fact, in all my years, I don’t see any real reason to use MongoDB over SQL, unless you’re storing log files or something.
We tried it out yesterday and it's ridiculous how convoluted it is and how difficult to do simple direct messages and groups. Groups couldn't be joined, I either couldn't find people or they couldn't find me. I really found the system intriguing but I can't imagine less tech savvy people to join as is.
Yes, and this article proposes no solutions and is kind of whinge-y. edit: downvotes? ok, got it.
Haha, i assure you the air is very cool. Did you give any either? No. We're both just thought experimenting. Just seemed fine to work with that until you got beat. Now your just pretending your don't get any evidence, when you never had any to start with. Don't a pretender! Own it, you lost.
> Not being able to get alignment is a valid reason to question "could".

I agree. That's precisely what I mentioned was the only barrier in achieving it. The answer to getting it done is getting alignment from various stakeholders.

Many of the people that think it's a hoax or the ones that don't believe it's doomsday support nuclear plants. That's always been the case in the US.

You can get alignment without even agreeing on why to go nuclear. This escapes the doomsdayers and the climate crusaders. And based on your comment... you.

I mean - you provided a perfect example. You mentioned our outgoing President thinking climate change is a hoax while we are talking about nuclear plants. And he supported nuclear plants.

People with different concerns and end goals can't talk and agree on things that would help both of their agendas.

You want nuclear plants? Pitch national security to one group. Pitch saving the world to the other. Pitch cleaner air to another.

You aren't going to get anything done if you try to convince them that they need to believe your reason.

As Neil deGrasse Tyson's dad told him - it's not enough to be right. You must be effective.
Which vendors charge for their DSQ?
Q: Why does TypeScript exist?
A: To fix JavaScript.

Q: Why was JavaScript invented?
A: To run code in the Browser.

Q: Why didn't they run Java in the Browser?
A: They did (applets). They tried. They failed. So they had to start over. They WANTED "Java" in the browser, but it wasn't practical for memory and CPU reasons, so they cobbled JavaScript together over a weekend.
Not that far for Fedora since they're already on 5.9 and if you opt in for the kernel stabilisation COPR, you can have it today: https://fedoraproject.org/wiki/Test_Day:2021-01-04_Kernel_5....