skysight-inc/HackerNews huggingface dataset:
They always said they could have easily integrated Luca like features but no, ofc we need to pick the option with millions of marketing money behind it instead of waiting for a privacy focused version.
(Singapore to) America subsea cable system to be completed in 2024
But if they put the vaccine passports on the blockchain? A game changer.
> records and uses your browsing history to sell online ad services.

Such lack of imagination... The recorded data build behavioral profiles of the whole globe on multiple dimensions.
Let's fix fonts: No more fonts with capital "i" that looks like a lower-case L.

The capital "i" has crossbars on it. Period. Any font that doesn't should be banished.
The problem is that a neighbor that sees your WiFi access point will be feeding Google/whoever with the correct SSID/geo correlation. Your data will eventually be excluded out as noise and you won’t have prevented anything. Basically your neighbors become unwilling informants.
Without rails, I usually use any of the other rack compatible frameworks, such as roda, sinatra or padrino. This article is conveying the message that,without rails, "in the beginning, we had TCP sockets.."
I got a lot of mileage out of just being able to build and ship things quickly.

A surprising number of smart developers aren't actually all that good at building software that people can use next week. They get stuck optimizing for every conceivable edge case and refactoring to make sure everything is abstracted out so their CS prof would approve, and go down rabbit holes of tweaking interesting bits of technology. But they never get around to building the thing so that the people who need it can use it to do their job.

So after building enough things at enough places for enough people, I started picking up a reputation as a guy who could build things, so when those people started talking to other people at other places who needed things built, my name would naturally come up.

Eventually, I put together a collection of artifacts in the form of working SaaS products that I could point to as examples of things I had built from bottom to top, to skip the need to have other people bring my name up. And one of those SaaS products is subtly engineered to spawn customers with needs that are nearly, but not perfectly, met by the product itself. Thus making them natural candidates for short consulting gigs to build them a version of the thing that better suits their needs.
A person like that would blame other people of the failure. Clearly this person owns up to it.
> Sure, locally installing a new version of cmake or some other build system is not too hard, but it's certainly additional friction.

for cmake it's basically

wget https://github.com/Kitware/CMake/releases/download/v3.20.0/cmake-3.20.0-linux-x86_64.tar.gz
tar xaf cmake-3.20.0-linux-x86_64.tar.gz
export PATH=$PWD/cmake-3.20.0/bin:$PATH

definitely simpler than installing cygwin, msys or wsl :-) (and some software requires cl.exe on windows anyways)
If you don't mind voiding the warranty, open up the TV and find the WLAN and/or cellular modem, and snip off the antenna/break the PCB trace used as an antenna. In some cases it's probably attached with a tiny coax connector that you can disconnect.

No antenna, no signal. Just make sure to get a TV that doesn't need online activation to function.
Why is advertising bad? Because it is done in a manipulative, coercive, harmful or annoying way? In what way does he commit those advertising sins?

If anything, his non repair videos are pretty awful emotional clickbait, but hey at least they are not advertising, right guys?
On the other side of the fence: Your own shitty framework owns your code, it locks you into this custom frankenstine thing that is a ball of mud that also smells bad. No one wants to look at it, it brings the best developers to their knees and the docs are impossible to relate to. One dude knows how it works and the tech debt is deep.

I'll take a Django project instead, thank you very much.

This is an age old discussion about appropriate abstraction.
What's so good about VSCode's SSH editing plugin over emacs' tramp-mode?

Does it runs shells and LSPs remotely for you?
Emacs can run eshell remotely, but LSP support is still lacking AFAIK. (I'd love to be corrected. xkcd.com/386)

Can you hop through different connections?
In emacs you can open a file in a private machine that's only reachable through another one by just opening,

/ssh:me@public-host|ssh:me@private-host:/path/far/away
you can't, but when a comment goes below zero it turns gray.
Is engineering a form of art?
I don't see it as "outdated", but mostly as avoiding unnecessary overkill. But then again, my to-do lists rarely have more than 5 or 6 items, and I don't manage other people, so I'm certainly not the public for such apps. For my use case, text files are perfectly appropriate and I would feel ridiculous using anything else. Like using a tractor to work on my tiny lawn.
I appreciate that you think it's ridiculously untrue. This means that you're either already rich (and therefore lucky), or you think you might be rich soon definitely (but aren't right now). In both cases, your line of thinking isn't compelling. In the former, it's because you suffer from survivorship bias and in the latter it's because you're clearly not an example of what you're trying to say.
This is by construction and is nicely explained by the slides I linked before.

Basically, autoconf generates a makefile which will work for your architecture. It does that via a script which is called "configure", which generates that makefile. The configure script is independent of your hardware and platform and does only require a standard POSIX shell, and it generates code for the version of "make" that is present on your platform. This means that in difference to other build systems, one does not have to install (and build!) the build system for the own platform, and also that there are no compatibility problems because the configure script always matches the source code distribution.

On top of that, the "configure" script is also automatically generated, typically using two files "config.ac" and "makefile.am", via a command which is now called "autoreconf", but this normally happens only on the developer's system.
This argument makes sense. One of the principles I abide by for all my new projects is that I want the dependencies to be more generic (not specific to the current business domain) than their dependents.

The code hierarchy 'tree' is made up of components which are generic at the leaves but as you get closer to the trunk, the logic becomes more fitted to the business domain.

A framework is generic and yet it requires to be used as the trunk (entry point, top level wrapper) of the project so it reduces the flexibility of the code. Sometimes this is desirable (e.g. maybe reducing the flexibility helps to scale), sometimes it doesn't add anything.
They probably do --- within the strict limits and confines of logic provided by the programmer. A computer virus has no ability to change or adapt beyond these rigid bounds without being re-programmed with new logic.

But a biological virus can change and adapt to new situations and environments all on it's own --- with new logic of it's own design. You could easily argue that a simple biological virus is more "intelligent".
This is true. There really isn't a built-in way to do chargebacks and in practice this can suck if you live somewhere where that is your only recourse if you get scammed.
Freelancers and Agencies: Increase Sales with Project Workshops
Unless you're working with strings, which are a hell of a nightmare to use safely. It's become a lot better in terms of the stdlib, but even stuff like the supposedly safe vsnprintf may quickly ruin your day and open potential overflow exploits if you forget to accout for the space of a null terminator or accidentally write the return value to a size_t instead of an int.

Error handling isn't obvious either. The linux kernel does it the right way with error code returns and results in pointers, but that's not the obvious way at all.
I haven't got much sources for you but what I've picked up over the years: a lot of OpenBSD's security is just old fashioned manual code review and audits, and there are not enough eyeballs. Someone like Ilja van Sprundel can go in the source code and find a bunch of issues without too much trouble [1]. I don't see any concentrated efforts to improve the status quo (where's formal methods, where's automated fuzzing, where are initiatives to employ more safe programming languages, static analysis, etc.). And while OpenBSD pride themselves on their mitigations, they aren't exactly state of the art and some of the more recent stuff (like trying to eliminate ROP gadgets) seems just futile. The biggest thing OpenBSD did with mitigations was enabling them by default for the base system and ports. What does anyone remember OpenBSD for in 2010-2020? Pledge, probably. That's a nice thing but more for containing the damage than actually making stuff secure in the first place.

https://www.csoonline.com/article/3250653/is-the-bsd-os-dyin...

My concern (and the concern of many others, I think) is that if OpenBSD suddenly got enough attention from the wider security community, including people who actively look for holes that can be exploited, there'd be plenty of important stuff found. Until then, these issues sit quietly waiting for a malicious party to discover them. There's quite some fanfare for OpenBSD, but how many of you are actively auditing the code? I'm subscribed to cvs@ and tech@ and I read them daily and I just don't see much contribution at all from outsiders. And when I do see it, it's mostly stuff like fixing typos or amending man pages. All the commits that change code with security implications tend to come from the core developers, and are reviewed by a handful of people at best. And I have seen some obviously broken stuff slip through.
A dependency (and that includes a framework) always comes with a cost. When using only a small part of the dependency, it's often better to roll your own than to use the dependency.

When you are able to use large parts of the dependency, then it's often better to use it than to roll your own.
Hey, I'm the author of Jocko. I've been working at Confluent the past four years.

I just finished writing a book that shows how to build similar distributed services from scratch, it walks though building a simple distributed commit log with built-in consensus and service discovery from nothing to deployment: https://pragprog.com/titles/tjgo/distributed-services-with-g...
“If there are sources” — the answer is different depending on whether you speak German or not. The practices of the so-called “Abmahnindustrie” (legal warning industry?) are well publicized in German media and widely known in the German tech sector. It might be hard to find an authoritative source in English.

As far as I understand, they don’t get that much more damages from larger cases, so they target masses of small fish instead. Individual ebay sellers, small private clubs (which are ingrained in the German culture) and the like.
Advertising is directly contributing to the increase in polarization. If you want to get ad revenue, you have to produce in increasing quantities every year (by directly reducing the quality of the content) and use shady tactics like clickbait and polarizing topics to increase page views.

None of those issues apply to paid journalism.
> Microservices led to the growth of devstacks that has replaced frameworks a lot.

You are just replacing one framework with another (Kubernetes).
Good point. We provide the ecosystem and corporations are the parasite. Companies are doing lots of things no human could begin to imagine doing on his own. We can try resist the will of our employer but it may simply replace us. It is obvious who is wearing the pants.
> I doubt CP2077 would even have been released for those platforms if they had been properly tested in the first place

They were, Sony and Microsoft just believed CDPR when they lied about fixing it before release [1]

[1] https://screenrant.com/cyberpunk-2077-developer-cdpr-admits-...
CMS vs. Framework: What Is Better for Your Project?
Sounds like Snowflake. If you dig into their income statement you see on 264m revenue, they spend 293m on Sales and marketing. [1] Whether Snowflake is actually a great data warehouse product or not, the main driver of its success is that they spend more than a quarter of a billion dollars per year selling it.

This is the state of play in the SaaS business.

[1] https://www.sec.gov/Archives/edgar/data/1640147/000162828020...
Satellite Imagery Is Not Becoming a Commodity
Tether stablecoin is fully backed, says new assurance report
The term nonce has a broader meaning than how it is used in bitcoin. (Edit: i reworded this sentence from what i originally had)

That said, no, finding a collision and finding a preimage are very different things, and well the collision attacks on sha1 will involve a lot of guessing and checking, they are not generic birthday or bruteforce attacks but rely on weaknesses in sha-1 to be practical. They also do not make preimage attacks practical.
I just downvoted your life because I don't like it.
This site is very sparse, and frankly mealy-mouthed. It doesn’t give any examples of what “frameworks” it would like us to reconsider.

When I read articles like this (why <insert technology> is “bloat”), I often feel there’s a level of arrogance behind it. Like the writer is just assuming that the readers haven’t considered the pros and cons of the frameworks they’ve chosen.

Since the article gives no examples of its own, let’s tak JS/React as an example. IMO, the upside of using React is absolutely enormous, and far exceeds the risks (especially given React’s excellent level of adoption, good ecosystem, etc). If we didn’t use React, we’d basically end up creating our own, shittier “framework” of informal conventions and abstractions, which would never be anywhere near as efficient/useful.
All good points, but they don't change the conclusion I wrote though, you effectively further specified the lengths to which Google is going to prevent any potential bad correlation to sensitive categories. Of course there will be correlation of some sort, they aren't random groups, but so long as you can't tell sensitive categories, you can only observe that a group seems more interested in a particular advertiser products. You can't tell their browsing history, just their interests.

Regarding the trial, yeah I know that origin thing is up, and the minutes for yesterday's W3C IWABG meeting aren't going to be out until next week, but the team working on this stuff at Google said that the trial up there is kind of fake and the code isn't merged in Chrome yet and won't be until 91, at some point I have to trust the engineers working on this stuff more than the rest.

[edit]: To be clear, I don't mean that there's no experiment going on, I just mean that it's not the browser running it, that the removal of 3rd party cookies as a way to opt-out likely is due to the fact that they may be relying on server-side computation to do this experiment rather than the browser, I wouldn't see why the browser would care about cookies to track your history, it's already stored in the browser.
That's not really consumer grade, though. Not something your average mom and dad can go buy at Best Buy and have working without external assistance.

Flashed TP-Link routers, hostapd on a NUC-style PC, Mikrotik, even Ubiquiti Unifi are what I would consider way beyond general consumer level. The userfriendliness just isn't there.
Make does what it does surprisingly well: It runs commands on files based on a description of dependencies. There is no shortage of would-be successors of make, but so far none of them has succeeded, which supports the hypothesis that "make" has hit a sweet spot.

There is one alternative to make which I think is worth mentioning, because of its simplicity, brilliance, and excellent support for correctness: it is redo, as in Apenwarrs redo:

https://redo.readthedocs.io/en/latest/

And redo works with autotools!
I'm born here and lived here all my life and this has never happened to me.
I think the author is right to argue against the claim that “the singularity must happen eventually”, but I’m not sure how applicable your observations are to the question of whether an AI singularity could happen, or whether we should be planning for that contingency.

Today, progress in machine learning is almost entirely empirical, with limited theoretical advances following later to make sense of the empirical findings. Our theoretical underpinnings are so weak we don’t even have a rough estimate of how much harder it is to make a self-improving AGI than e.g. GPT-3. Maybe it’s many orders of magnitude harder, and not even remotely solvable by taking iterative steps from where we are now. Maybe it’s just one unifying theoretical advance away.

As for waiting and hoping it happens on its own, that’s not a great description of what’s happening. A huge number of people (possibly too many, leading to short-term incentives) are trying to make improvements in any way they can think of. Progress is happening at a staggering pace —- we just don’t have any idea how much progress is needed to reach the goal of AGI.
IEEE 802.11bf: Toward Ubiquitous Wi-Fi Sensing
Sure, but the Rundfunkbeitrag has no need for your current location, they just need to know which apartment you're registered at.
Content personalisation is not web personalisation
20 years on, it feels like everyone should be strongly considering the Ben and Jerry's model. Even if there is literally no competition in the field, the threat of Google or Amazon or Facebook throwing buckets of money and top engineers to put a company in the grave before it's even properly born is more of a reality than we ever could have imagined in 2000.
> The idea that a todo app is a capital intensive business is laughable

It’s not just the building of the app that’s capital intensive - it’s the customer acquisition cost.

A highly capitalised startup with a war chest can afford to spend $100+ per customer. You can’t.

It’s like the OP thread says - you can’t field of dreams this. “If you build it they will come” is not a business strategy when your competitor is spending millions of dollars on ads.
It's all a bit "He says, she says", isn't it? I think it's not really the point of the Tweets anyway
That's not true. You can use AWS SSO with the CLI/SDKs (therefore including stuff like Terraform) with webauthn.

It briefly pops you out to a browser to authenticate and caches a short lived token locally
It's always good to hedge your bets.

The two represent the common dichotomy between a reimplementation that potentially reach much higher performance, but will continuously have to battle for compatibility, and an in-tree development that will be limited by backward compatibility etc, but that if merged would be guaranteed to stay up to date.

Maxime explains this well in her YJIT talk [0], and it's the same with other languages such as Python, where PyPy is in most cases much faster, but tend to lag a version or two behind.

[0] https://www.youtube.com/watch?v=vucLAqv7qpc
I've recently been getting google ads for customized tshirts that either have my first or last name _on the shirt in the actual ad_ [1]

I absolutely hate it and can't find anything about it online, other than 2-3 people on twitter complaining about it as well. No idea how they're even doing this or how I can disable it.

[1]: https://i.imgur.com/cRSZFwK.jpg
> Of course there will be correlation

Yes, and given enough data this:

> so long as you can't tell sensitive categories

will not be true.

> I have to trust the engineers

The engineers that work for a giant corporation whose entire reason for existing is mining and collating as much data as possible on you? Why would you trust them at all?
The CCP are quite image conscious. All people are really asking is that they treat the Uighurs in a normal manner rather than trying to overthrow the CCP.
Thank you. We need more messages like yours, short and sweet. "We need laws for $problem" is something that can succeed in a democracy.

Beating the bush around one's pet peeves or detailing what one deems an optimal policy is fine, except it often waters down that basic message for 99% readers, when only 1% will be somehow informed/enlightened.
> is it true that MySQL scales much better than postgres?

It's a strange question since "scales" depends on your site, but the short answer is yes:

1) Most of the FAANG companies run on MySQL, and they're approaching a trillion dollars in value each.

2) MySQL doesn't need a vacuum process, and isn't sensitive to number of indexes per table (write amplification) like Postgres is.

3) MySQL has more built-in replication methods than Postgres, which is very important for enterprises.

4) Postgres has a complex grant syntax that most devs don't understand.

5) Postgres has compliance certification issues around COPY FROM/COPY TO. There needs to be a grant to disable that per user.

Both MySQL and Postgres are great Open Source databases. I use both, but prefer MySQL for the above reasons. I consider Postgres to be substantially weaker for enterprise use cases though.

Source: DBA.
Or, Dustin is lying or remembering himself in the best light.

We'll never really know.
At least in Java it's rather easy with PrintAssembly, if you do care about performance.
Sublime Text was my favourite editor, but since a couple of years now been using VSCode ( extremely slow in comparison to Sublime at the time, but not very noticeable once I bought my MacBook i9, which cost me my eyes and only from that time was bearable).

I remember watching loads of talks or even knowing about well payed developers who didn't pay for the license.

I don't understand how someone who makes so much money was not capable of paying for such a small fee, for something they seemed to be using to do their work...

That says a lot.
It has been 21 years. Can we let the past go?
You're correct. Mistake on my side.
I'm pretty sure CP2077 was denied several times by Microsoft because there were so many problems.
The Complex Legacy of China’s Cinematic Pirates
I think:

1. Good feedback is hard to get outside of a trustful relationship.

2. Good feedback is important.

Consequently, I think it would be worth $300-400/month of your employer’s time to have an ongoing relationship with a contractor with whom you could do code review and technical coaching sessions with.
I have to pay AT&T $300/mo just to get 300/300 symmetric in Silicon Valley.

It is honestly crazy. Not surprising they are trying to further limit bandwidth.
Most people want things for free. If you asked them if they want free access with ads or paid access without ads I guess most of them would choose the first option.
You wrote all that to tacitly admit that you had failed to convey your point effectively. Cool.
Yes, if you show that his opinions have changed.
It's my understanding that they're being charged with laws that are same as hacking a company server. I'm sure Chinese law works different than Westerners are used to.
I feel the influence of the framework is stronger in the case of libraries like vue, angular, or react. In those cases, your application lives within the shell of those frameworks, and migrating to a different framework means reimplementing almost everything.

Frameworks like Django, Flask, FastAPI and others are different. It depends how you use them, but they're just libraries for the interface layer of your application. Like you say, inversion of control is the key: you want to make the interface depend on your code, and not the other way around. It should be possible to switch between frameworks without having to make changes to your controller/business layer.
I really want to use frameworks, but I find the learning curve is often hard to overcome without using the damn thing daily.

Any advice on this front? Is it just a case of using, using, using and eventually it'll all click?