skysight-inc/HackerNews huggingface dataset:
Formally verified against what? and what assumption were made?

miTLS is formally verified against the TLS spec on handshaking, assuming the lower-level crypto routine are good. It is not even free from timing attack.

EverCrypt have stronger proof, but it is only safe as in not crashing and correct as in match the spec in all valid input. It is not proved to be free from DoS or invalid input attack.

OpenSSL do more then TLS. Lots of interesting thing are in the cert format parsing and management.
As far as I understood (maybe it was/is on groklaw.net somewhere), Linus didn't care as much about the users. His main concern is the developers, so he doesn't mind the users being tivoized out of their ability to run adapted code.
> Look into the various ways that RAM can be connected via high-speed serial links

https://www.devever.net/~hl/omi
Can you link your website?
As someone who's created their own theme for VSCode this could've saved a ton of time.

However after trying to just change a couple colors I'm already extremely frustrated since I can't actually type a hex code in the color picker without it hijacking what I'm typing and adding characters, even when I'm trying to delete. The only thing that works is if I paste in a hex code. I'm not sure if this is an attempt at autocompleting the hex codes but whatever it is, it's maddening.
Here's Ubuntu's: https://ubuntu.com/security/notices/USN-4891-1
I shouldn't but ...

https://github.com/HackIT/journal/issues/383#issuecomment-80...

I did
The Era of the Wood Skyscraper Is Arriving
The annual conference does? I have certainly changed policy (though Kieth Flets branch stole my thunder) and turned over the executive :-)

More professional unions do tend to have more lay activists who are more open to exercising control over the full-timers I feel.

By pensions I meant you have a separation as in the UK where the trustees from both sides at at arms length and Hermes (a huge pension fund) trustees sacked the managers and is now self managed at a reduced TER.

And remember not all developers live in the US.
Is there a term for when a company says it's working on something in the hope it will stop others working on it but has no real intention of ever really shipping it.
AI helps Auto discover product feature needs: ex Barcode Scanner
That's fair. In the future I'd like to implement features like: automatically handle publishing to the marketplace for the user (right now it's a pain), upvotes system, etc. Accounts are a good solution for these types of features + it makes the theme data persistence way more robust so you can comfortably / reliably start a theme and then come back later to finish it. There are many suggestions for making signing-in optional though, so will explore this.
Since 0.7 (which was 1.0 with deprecations)
In julia 0.6 and before it was exactly as bad as described.
(though there were things like Playground.jl to kind of work around it)
Timing Your Startup [video]
Tailwind JIT fails to credit Windi CSS
You can be normal, or you can live well.
This just seems like Google marketing rather than an interesting initiative. I took a look at the digital marketing module, which is relevant for me, and it seems to just be lessons on how to use Google’s own paid advertising features.

Not that I’d expect anything different, but curious if I’m missing anything interesting in there somewhere?
Looks like it:

; create a folder with the following files:
; - payee.txt - containing the company address;
; - payor.txt - containing the client's address;
; - invoice-number.txt - containing the last current invoice number. Incremented automatically;
; - tax-rate.txt - containing the tax rate (i.e. 13);
; - pay-interval.txt - containing the pay interval (i.e. 30);
; - locale.txt - containing the date locale (i.e. 'en');
; - branch-address.txt - containing the bank branch address;
; - account-info.txt - containing the bank account information;
; - invoice-lines.txt - containing the invoice lines.
; run the program and the invoice will be generated inside the folder, sent to PDF and the printer at once.
totally! The team has making strides recently to split up the packages so that only the lightest layer needs to be loaded upfront, and the Tina UI can be loaded dynamically when in edit-mode.
I'll loop in some members of the team that might be able to speak more to that.
Seems to be broken for now unfortunately; will have to figure this out.
It may sound unfair but that is exactly what an open source license means: you release something for others to use without a payment requirement. If you are a developer and your intention is to make money then you should create a business around your project or if you find it unfair just stop releasing it under open source :)
Co-founder (and long-time HN lurker) here.

We think that editing content for JAMstack sites can be WAY better without compromising code quality, extensibility, etc.

Most CMSs feel like a GUI on a database. We’re bringing an intuitive, contextual editing experience. Think a CMS meets Wix but developer-friendly.

How we're different:

1. Git-first. The filesystem can be a database for your content.

2. Visual editing. Your marketing team wants to see what they’re editingl.

3. Open-source and agnostic. Extend Tina with plugins. Point Tina to any API to read/write content (filesystem, GitHub API, or any 3rd party API).
Splashtours Rotterdam – The Splashing Swimming Bus
I'd add to that: 'toy' CLI programs like fortune, cowsay, figlet, rev, etc, and some simple examples on how to wire them together using pipes, redirection, and substitutions.
So if you're saying everything does support a web database... then what's the reason people aren't using it for websites?

Why do you say it works for "small" websites but presumably not large ones? If it's not transactions, concurrent reading, backups, or administrative tasks... then what's the issue you run into?

Genuinely curious... I'm wondering if everything I've heard about "don't use SQLite for websites" is wrong, or when it's right?
This is super cool, love to see more people working in this space!

Would love to chat about what you guys doing.Potentially collab and improve both our products!

Reach out rahul@modfy.video
Good question. I think the answer is no, and that `let value = *ptr;` is UB if the pointer is misaligned. The right way to go is `let value = ptr.read_unaligned();`

But the docs will say this:

> Accessing unaligned fields directly with e.g. packed.unaligned is safe however.

https://doc.rust-lang.org/nightly/std/ptr/fn.read_unaligned....
It bothers me a bit. Having heard it now in so many contexts it is clear it was not spontaneous ... in fact several other tells in this interview make it clear very little was spontaneous when Steve was facing the media.

I suppose I am not surprised by that — that's what marketing does.

The bicycle analogy looks particularly transparent though: there's a pseudo-intellectual aspect to it, even name-dropping "Scientific American" seems to be there to make the speaker appear well-read, a deep thinker.

It works though a lot better than his electric motor analogy that he lead off with. ;-)
The best FAAS framework
Both/and.

Yes, there are those who harass and call it criticism. That's wrong, and needs to stop. And there are those who receive criticism and call it harassment. That's also wrong, and also needs to stop.

And, one layer deeper, on both sides there are people who just can't take disagreement, whether because they're thin-skinned, or because they are more committed to a position then they are to truth.
That’s still a lot, I think. Compared to other charities using a site like charitynavigator.org you can see that is a high price for a charity.

It’s also an odd legal structure to separate the platform from a non-profit to do admin tasks, since non-profits are not really that good at doing admin and compliance.
Yeah the Firebase + GitHub auth seems to be broken across-the-board. Going to dig into this.
It seems as though there is a new article about this daily.
Venturebeat article on seed round funding, and general public release, including windows:

https://venturebeat.com/2021/03/25/coscreen-exits-stealth-to...
I wonder if the best course of action in this situation would be to simply report the company directly to the ICO as GDPR violators and not bother to contact them at all.
In retrospect, Google Reader could have evolved into a service like tiktok that keeps pushing interesting contents to its subscribers. Of course, it's easier to say that in hindsight.
A lot of the attempts to replace Reader aren’t clean enough - they try to present the feed like a magazine layout or do other BS to dress up information, where Google reader was “just the facts”. It feels a lot like this old game that kicked ass for the time, but you realize the magic will never be back again. Google killed it almost certainly because it distracted from other money making opportunities, so a lot of us associate it with a further corruption of the internet in a broad sense - like intentionally making things worse to make money off the bad process. They win, we all lose a little bit.
From their FAQ on the IT role, which likely isn't much different for anything else:

> Why did Google create this program?

> Google has long faced an issue that many other companies also contend with -- we had open IT support roles, and not enough qualified candidates to fill them. So, a few years ago we began working with a nonprofit organization *to provide training and pathways to roles in technical support at Google*. We learned that not only is IT support a highly teachable field, but that we could teach someone completely new to the industry the IT fundamentals in under six months. So, we decided to build an IT training program on Coursera, created entirely by Googlers who are expert in IT support so this training could be available to everyone.

This is just a way to funnel entry-level roles over to Google and/or use its services. Why pay people to learn on the job when you can have them pay you to learn before they have the job? :)
Thanks for sharing this, I will look into a light theme for a future iteration.
I had no idea what I was doing back then - copying scripts from MSA, no idea what chmod or ftp binary mode or even what the unix system I was telnetted into was (couple of years before). Managed to get things working though.

No mention of server-side includes, which were great -- you could include a nav bar on all your pages and just have one file to update, you could include a 'last updated' line at the bottom based on the file modification, you could include a visitor counter.

I did a website for a local art+book shop back in 1997, it was awful. Stopped updating it after 6 months, but it was kept online for some reason - even after the shop closed. archive.org shows the SSI counter was still incrementing in 2005. I assume the (copy-and-paste) code ran a script that opened a file, incremented the number, wrote it back to the file, then printed the number.
I have been building an RSS reader for developers called https://diff.blog. It's havily integrated with GitHub. For example, when you sign up, it automatically follows the blog of developers and organizations you are part of. I have been working on it in my spare time during the last 2 years and it has been growing steadily. It has over 1200+ users now. Do give it a try!
Bell Labs
Never understood the draw of Firefly. It's ... okay, but kinda cringey.

Google reader was nice because it was simple and it just worked.
perhaps it is - but it's a cultural thing, and culture tends to affect both the private and public sectors.

DARPA is still doing impressive things though as far as I'm aware. NASA is once again doing cool things, but I can't help but suspect that interest in space was reignited by SpaceX, and Elon Musk is the archetypal definite optimist.
Enormous strides have been made in compile time evalutation since then, and other interesting fields like MIR optimizations (optimizations that happen in rustc and not the llvm part).
What Is a NoSQL Database?
I can't log in unfortunately. I love heroku, but it does seem like they have their fair share of issues.
I dunno, but he definitely passed:

https://mobile.twitter.com/bella_velo/status/117252486419394...
Only a few things in GP are specific to poor; in fact some e.g. out-of-control children are more typical of the rich. Unless if course you are saying poor are the ones getting into fights or doing the unsolicited selling, in which case yes, enforce the rules and remove them regardless of their finances.

"Complaints that seem reasonable individually" are still reasonable together, in fact much more important taken together. I don't like loud children, but I can put up with that. I can put up with loud music. I can put up with walking past a tent or two, maybe even with a fight nearby if I feel it's not going to spill over. At some point though, the threshold is crossed and I don't want to put up with these anymore.

As far as fights, drugs, etc. I don't think the public has "degraded"; the root of the problem, I believe, is lack of enforcement of the rules. First, that allows shitty people (I don't care if they are poor or not) to get away with shitty things in the first place. Second, it has a cascading effect where such behavior is normalized. Third, it clearly communicates to everyone else that they are on their own when this kind of stuff happens. The logical response is to move away.
I wish there were more tech podcasts that come with a spontaneous whiteboard segment.
Ruby on Rails Uncommon Things
We expect a much stronger focus at the neighbourhood level will deliver very high social, environmental and economic returns from small outlays. But, for this to be achieved, much greater urgency is needed.

This strikes me as a "pushing a boulder uphill" approach and that tends to do poorly. A "water runs downhill, so let's try to be downhill" approach is vastly better.

Instead of arguing that "We need more bus service and it's a pittance compared to trains" make a stronger case. A budgetary argument of that sort is a pretty weak argument. It's not compelling. It's essentially manipulative and it tends to not work.

Instead of decrying the urgency of the case, give people easy steps to take in the here and now. Tell individuals what they can do as individuals to participate in the growth of 20-minute neighborhoods. Tell businesses what they can do.

The article indicates that the suburbs in question are already densifying and then follows up with a defeatist attitude along the lines of "...but we are still so very, very far away from what needs to happen, boo hoo hoo!" instead of saying "This is already happening to some degree and here are some easy steps to take to help reach the critical tipping point and make this happen!"

The writing is not that compelling. The approach to the problem space is not that compelling. The arguments aren't that strong.

A better approach would be to profile cities and neighborhoods that have achieved this, even if it was a long time ago. What were the ingredients? How can you add just a little something to existing infrastructure to make this pop?

This isn't hard. You just need to give people the answers they already mostly want. You need a recipe for how to make this happen and then a lot of people will be all over it like gang busters.

If people are failing to make it happen, it's because they don't have the information or mental models or solutions they need. If you give them that, a lot of people will run with this.
I remember creating a web query form for an employee search or something like that using CA Clipper and reading stdin an spitting our HTML on stdout. Worked like a charm, was fast and made that data available to whoever needed it.
The Netherlands has a substantial wealth tax though. About 1.6% of all assets, anywhere in the world.
> - you're someone genuinely scared of the possibility of raised water levels in a few decades talking to the owner of a 3 mpg monster truck

Someone 'genuinely scared' of raised water levels in a few decades is as nutty as someone who's 'genuinely scared' of QAnon or vaccines.

A 3 mpg monster truck owner might have chosen to not have any children, so are not raping the planet like breeders.

If I'm - "you're someone genuinely scared " then I'm pretty close to mentally ill. If my brain is malfunctioning generally it'll be much harder to deal with conflict. Why not just chat to someone who owns a truck, for my own mental health reasons.
Do you mean std::array<T,N>? ( https://en.cppreference.com/w/cpp/container/array )
> Make your dependencies constructor args, then you can "inject" whatever the hell you like that conforms to the expected type. You can stick @Autowired on the constructor if you like, go nuts. But even without, well hell, you might not actually need that DI framework, and it's still in a testable space.

Yes, this is exactly what I mean, the amount of wrong stuff that is in the constructor makes me believe DI is a solution for something else.

Infinite amount of times have I encountered stuff in the constructor that shouldn't be there.
Object A has a constructor with a bunch of dependencies, one of them is Object B.

The proper way is for Object B to use object A instead.

Blindly injecting everywhere is my problem with DI. Without these frameworks one would see that dependencies flow in a different direction if proper interfaces are defined.

For example, React Context and useEffect hook is implicit DI yet people have no idea it's DI and I see codebases using React + DI framework instead.

The only DI magic is the topological sort of dependencies and automatic construction. That stuff is 20 lines of additional code so that React.Context and useEffect work the same way.
It's such a nice tool, I like it a lot.
New York Times Article Sold for $560k as an NFT
To say that the FSF failing is different from people not caring enough, you have to define the goals of the FSF in a way that it can succeed regardless of whether people care about it or not. I don't think that this is possible, and therefore the FSF failing is indistinguishable from people not caring enough.

Even people who aren't very good with email or don't understand the difference between WhatsApp and SMS can do Zoom/FaceTime calls or use E2E encrypted messaging platforms while there is no sanctioned FSF platform to do either. Maybe the public would be concerned with the FSF's ideals would the FSF do the smallest modicum of effort to keep up with the public's use of software.

And, of course, the FSF failing is not an indication that the open source movement failed. Open source arguably won. However, free software is currently grasping at the threads of relevance.
I dislike Twitter. I dislike tweet-threads. I read maybe half and just had to stop. It’s a terrible long read format.
Microsoft Visual Studio Net Professional Version 2003 Full Version Complete
Are you all having shake ups within the company? I'm not going to deep dive, but I heard some rumors about some higher ups leaving.

After the Cloudflare Pages release, I'd be curious of what your future road map looks like and how you all plan to compete and grow.

Thanks for all you and your team does. What you have done for front-end development and the community has been nothing but awesome and inspiring.
How would you know what Reddit as an organization likes to do?

Seems anthropomorphic to me...
There are some issues with cryptographic code in high level languages, so I'm not sure what is better. Even C is considered too high level some times.
"Inform the public of what is going on in university classrooms and in what counts these days as academic scholarship" seems to me to be reasonably paraphrased as "revealing the truth". True, the latter phrase has a bit more of an edge to it, but the idea is similar enough that I'd say Boghossian did in fact say, not those words, but that idea.
Updates from heroku status page. Impacted services -

- Accessing the Heroku Dashboard

- Using the Heroku CLI tools

- Heroku Connect

- Data dashboard

- Heroku Scheduler

- Builds and Deployments
But why not. The worst thing that happens is maybe a teacher needs to reflash the OS, if you tell kids that no we're not going to play Minecraft today, we're going to make Minecraft you can inspire a lifelong love of programming.

Sometimes you just got to strap yourself in and embrace the the terminal. If you're too afraid to try you'll never learn. Once around the same time I actually fried a motherboard by not mounting it properly, a nice computer repair shop owner gave me a bunch of motherboard spacers for free and told me to never Mount the motherboard directly to the case again.

I actually love programming in that it's one of the last Fields where you can teach yourself how to do amazing things for free. Sure if you need to deploy things you might need to spend two or three bucks a month on AWS, but even then you can get so much done locally.
Why should they? These are just a bunch of classes for people who want to learn some things. The only lie I see is promising a job for people who studies only 10 hours a week....for me it's not ,,a ton of hours''

Also of course don't pay for the certificates, IT education is already free.
Strange, do you know what's giving you that warning?
Kind of off topic, but I've had a colleague once that defined his role on LinkedIn as "Problem Expert". I'd be worried if I had such a role in my company :P
I've been using meet.jit.si for pair programming because it's one of the few collaboration tools that allows multiple people to share screen at once. I'll put my coworkers screen on my 2nd monitor, and that setup has been really productive.

CoScreen is the rare tool that would also fit into this workflow.
Officially, but Jobs/Woz were making and selling illegal blue tone boxes 10 years before that around 1972. They allowed you to basically steal phone time from the phone companies by simulating the sounds that nickles/dimes/quarters made when inserting them into a payphone so you didn't have to pay to use the phone for local or long distance calls.

https://appleinsider.com/articles/20/10/27/blue-box-circuit-...
6G era research – Bell Labs
I'm not American, and I'm not really a fan of the second amendment for that matter either. Still, I can't help but notice the lack of discussion about a certain angle to this. While the article talks about how such a law might "stigmatize" mentally ill people, the fact that it denies the exercise of an explicit constitutional right to mentally ill people without a judicial process seems to be an angle largely ignored. Not just in this article, but in others I've read about the topic, too.

If your constitutional rights can be permanently denied by a doctor signing a form, or even just the police arresting and admitting you to a hospital (it isn't too clear just when this loss of civil rights is triggered) -- then there is actually a serious problem, in my opinion. A much bigger potential loophole than the kind they're talking about in the article.

Up here in Canada, if the Charter were silly enough to have a right to own firearms provision explicitly listed, I know that a law blanket-restricting the mentally ill from ownership would die in the courts immediately. (We don't actually have such a blanket ban here -- though it's certainly hard in practice if something like that shows up on your background check. And there have been Charter discrimination-based arguments made.)

There has been one US appellate court ruling on the topic: https://www.jurist.org/news/2016/09/federal-appeals-court-st... that I can find, which got little media coverage apparently. Given it's the Second Amendment I guess I understand the reluctance, but it's in the text of the law, it's been interpreted by the Supreme Court to mean a right to self defence, and that right can't be denied to an entire class of people indiscriminately, just because it's awkward.
It shouldn't ruin science for you. It should ruin the media and the public for you.