skysight-inc/HackerNews huggingface dataset:
I noticed this as well with myself and others. At 5 years you become an expert in whatever stack you choose. Whatever best practice you've adopted becomes religion. It isn't until year 6 or 7 or 8 when you start realizing you know less than you thought. By 20 years realize you know nothing and you have reached developer enlightment.

Coming to terms with the business side is the first step.

Having your best practises or framework mocked by the next generation of zealots is part of the process. Patterns you know and love become anti-patterns only to return in a distance future in some limited formed with great fanfaire.

Letting go and a realizing your project / patterns will get hijacked by the business side, other developers and often enough pms is freeing.
Needs (2014) added to the title.
Sometimes I wonder if the failure of languages like these - along with Ada is purely aesthetic one.

Who knows, maybe Rust and something like Ada++ http://www.adapplang.com/ will be able to dethrone C++, or Java some day.
Yeah I did, but it referred to a couple studies such as

https://academic.oup.com/aje/article/155/9/827/58224?login=t...

That did show the association. The study I linked just happened to cite the relevant ones so it was easier to post that.

Though I should’ve just linked directly, my bad.
Neither is the opinion that "This problem exists because someone wrote a tool that should only do one (really well) and but instead made it do five different things."

You can make security bugs in simple tools - this security bug is not purely a function of the number of target use-cases.

Nor do you have any rational basis for asserting that the given app "should only do one [thing]".
With respect to TW, he changed when his position became far past untenable. It's like someone flipping from being climate denialist in 2020 instead of 2010. Being proximate to TW should make their poor military preparedness more, not less apparent for those that follow the subject matter. The response shouldn't be, what a serious mind, but what took so long?

Overall he's well worth reading, keeps up to date with literature, does good summaries. But his analysis on TW has been more outlier than consensus. And up until recently, stubbornly so.
If you care about privacy, it’s time to try a new web browser
That is a very simplistic, and incorrect, response to the problem.

GitHub provides computing resources, for free, to attract users. This is just one of the challenges of that business model. If this is intolerable for GitHub then it's up to them to find a strategy to counter it.

We don't need to ask the government to punish everyone participating in cryptocurrency.
Take less meetings and deadlines.
Which is as it should be. Backward compatibility and 'stability' (maybe familiarity/recognizability would be better words) are far more important than random changes/experiments that are the core features of Linux desktops.
Ironically, when I watched the Kotlin conf, that seems exactly where JetBrains is trying to drive Kotlin, boosted by Android's adoption, trying to make a Kotlin eco-system out of it.

I am betting it is going the Delphi way.
It’s lovely to see this here! I made it a few years ago; it was the last project we made under the Kiln banner before we devoted all our efforts to building a software platform (Flourish) instead.

If anyone has any questions, AMA!
Thank you. I thought that's just an article about the NeXT browser. Now I noticed the button.
https://www.researchgate.net/publication/221241381_Scribble_...
Sealed Super Mario Bros. game sells for $660K
Don't believe everything recruiters tell you
It’s not the only option. You can do a wide variety of exercise without a gym or equipment.

Body weight exercises are a great form of strength training you can do anywhere with no equipment. You can replace walks with runs, sprints, or interval training. If you have an appropriate body of water near you, you can also go swimming without going to a gym or pool. Start intervals of boxing the air (if you haven’t done it before, you’ll be shocked at how long 45s is while you’re punching as quickly as you can).

With a minimal investment, you can take up jumprope. An excellent cardio exercise. Alternatively, grab a hula hoop, and learn to hula.

There are tons of exercises you can do that aren’t walking or going to a gym. It’s not a binary option.
Socialism 101 [audio]
Can you setup Nebula on your Heroku dynos and an RDS instance?
Speed up things with Rosetta Stone APIs
>In some circles, such walks are viewed as an axiomatically good thing. You're expected to go on them, and to do so enthusiastically. You could decline, or do so under protest, but that would be seen as deviant.

You just described my entire family.

The advantage of being surrounded by folks like this is I get to exercise (as in "keep it in shape") my built-in aversion to peer pressure daily.
How? Nothing about cryptocurrency is anonymous. Everything you ever did with them is right there in public on the Blockchain
Quicklook is such an amazing feature and it seems so basic that I just don’t get why windows hasn’t added anything like that. Are there patents on this?

Just an example that I have about every day: before sharing a file via file select/open dialog I can double check if it’s the correct one.

I can only speculate that quicklook prevents a substantial amount of accidental information leak across the entire world :)
Oh I don't think they'll necessarily profit - I'm saying that they are incentivized to take a lot of risk. But I don't think that makes them either any smarter or that they'll have a guarantee of being able to get out before the walls collapse.
I've had the opposite experience. I used to be a huge Apple fan, and all hardware I owned was Apple. I have since completely moved away from them due to how buggy everything is now. I use Ubuntu MATE on a Thinkpad and it works beautifully. I honestly have zero issues with it and absolutely love it. I've been using MATE for about 3 years now.
They need to provide tooling at the same level, otherwise they will only succeed in niche areas where security is the top level concern, and good enough static analysers aren't acceptable.

Think of Qt, WinUI, CUDA, Unreal, Visual Studio debugger, C++ Builder kind of tooling.
This. The compiler is doing the least surprising thing here - I don't understand the author's confusion.
GHC Maintainer Preview Proposal
Is it just me that finds this font really hard to read? It makes it really hard to focus.
Regarding Preview, Gnome has an app called sushi that acts similarly, though in a read-only way. I don't usually use it much, but it seems to work on most videos and photos I've thrown at it.

As far as phone integration, KDEConnect is quite good, though it only works if the devices are in the same network.
https://spf13.com/presentation/on-the-shoulders-of-giants/
Here's what I don't understand: where do children get their money from to compulsively spend on lootboxes?
Doesn't Fallout have booby traps on some locked chests or computer terminals?
You're right that that's a possibility. A completely undiagnosed underlying condition would be missed by that type of control group.

But we know that COVID admittances caused a big increase in the total number of people hospitalized - to the point of overwhelming some health care systems. That strongly suggests that underlying conditions would not have sent as many people to the hospital anyhow if COVID had never appeared and infected them.

It is possible you explain the mechanism, though. Perhaps there are lots of people with undiagnosed underlying conditions, and getting a serious case of COVID is enough to worsen those conditions into life-threatening ones. (Perhaps this only hastens the inevitable for some of them.) If this is the mechanism then both you and the article's hypotheses would be correct.
Radical Transparency – The next big use of Clubhouse
>In other news, water is also wet!

I dislike this mentality that I often see. Common sense can be misleading and humans like to deceive themselves. Studies on things that are obvious often yield surprising results.
https://github.com/dswd/vpncloud/blob/master/src/crypto/core...

https://github.com/dswd/vpncloud/blob/master/src/crypto/comm...

This implements a novel cryptosystem. Default to not trusting novel cryptosystems until you have sufficient reason to begin believing that they are trustworthy.
You had to log out from email and ideally leave work phone and laptop in the office. You were also given about a week to catch up with stuff. It was pretty good.
I think the point is that we're supposed to feel sad about this economic activity because it's emitting tons of CO2.
Yea. Something smells fishy. They are claiming sex trafficking for a $25 charge that supposedly includes the cost of sex as well?
A relationship that felt good and worked well emotionally, and where sex was approached openly and appreciatively, promoted orgasms.

You mean that people need to be in the right mental state to really cut loose, enjoy themselves, and feel trusted around those they are the most intimate and vulnerable with?

the _hell_, you say.
When I read your comment I thought that yes I probably underestimate how much it takes to hunt for food if you are a house cat, hungry for couple of days. Because one does not get 100% hit when hunting.

So it would be more like I knew where to go but I had to take that highway exit because I badly had to use the toilet. Maybe those 9 months would be quite right.
Having two NATs is really the only case worth mentioning. Considering almost all internet traffic involves at least one NAT, if you can’t handle a single NAT case, you’ve got issues!
> If strings are always unambiquously detectable, why allow quoting them at all?

Because strings can contain whitespace and other structural characters that would confuse a parser.

> Having two representations for the same data means you can't normalize a document unambiguously.

The document will always be normalized unambiguously in binary format. The text format is a bit more lenient because humans are involved.

The idea is that the binary format is the source of truth, and is what is used in 90% of situations. The text format is only needed as a conduit for human input, or as a human readable representation of the binary data when you need to see what's going on.

> An important feature of RFC2119 keywords is that they're always capitalized (ie. the keyword is "MUST", not "Must", or "must").

Hmm good point. I'll add that.
> Boycotts, disinvestment, and sanctions is how civil rights movements are fought.

Boycotting a billion-strong nation is not the same as boycotting Amazon because you don't like its labor policies. China is a technically advanced millennia-old civilization with a huge army, vast geography, and a nationalistic population. If anything, boycotts and sanctions will increase nationalist feeling in China and create an unstable and dangerous situation. The U.S. and Europe do not have the economic leverage to take down the second biggest economy in the world without destroying themselves in the process.

Furthermore, as liberals never seem to learn, despite the disaster of Iraq, if you did succeed in instigating a "regime change" in China, the result is likely to be immediate destabilization of the whole region and a horrendous civil war with massive loss of life. It will not magically transform China into a happy democracy.
[META]

I think it is crazy that the following are not possible to opt out of:

- Match and combine offline data sources
- Link different devices
- Receive and use automatically-sent device characteristics for identification

With data being shared with the following 3rd parties…

"We and our partners process data to provide:
Use precise geolocation data. Actively scan device characteristics for identification. Store and/or access information on a device. Personalised ads and content, ad and content measurement, audience insights and product development."

Array.from(document.querySelectorAll('#ot-ven-lst > .ot-ven-item')).length
# 661
> perhaps this is the worst possible abstraction to be protected by a security framework.

I honestly don't understand how anyone with at least a basic understanding of how OSes are designed and operated could ever arrive at that conclusion. The layers of wrong assumptions required to support that assertion are in the level of "not even wrong" confusions.
Musicolet is much better than Vanilla Music in terms of UI and features.

If privacy is your concern, Musicolet cannot access the internet. It does not have that permission. I use the app, and I have checked for connections it tried to make on startup. There were one.
Can you racily write the same field containing a slice from multiple threads? Unless you have atomic multi-word writes, you could observe tearing and go out of bounds silently.

One thing that JVM guarantees is that racy programs cannot break the type system. This gets hard when you have multi-word quantities.
This has been a frustrating thing for us on GitHub , not because of crypto, but for stealing credentials. It's hard to make it so only approved people can run actions and lock down what exposed actions' runtimes can do.

Until it is default-deny for ~all capabilities with say RBAC for enabling, which are basic security principles, they're pretty scary for public repos. It's even scary for private ones as you might want say a contractor or intern to be limited. That they have people publicly dedicated to whackamole response, but seemingly not to security fundamentals (or if they do, not following them / empowered to), is frustrating. Look at the GHA permissions panel and then think like an attacker or defender, it's scary.

The environment variable stuff awhile back was understandable.. but not the big issue. As basically any user can submit a PR that can make current actions that run code (ex: run tests) to run something else by editing the action or code, that means any public user can burn repo $, play in repo-exposed runners (ex: get into corp sandboxes), and if using continuous deployment or service integrations , into their production systems, wherever they publish packages, etc. GitHub is api exposed and git can have commits deleted, so they can even cover most of their tracks. This is SolarWinds all over again, but now a bot can run it automatically on ~everyone!

GHA is both one of my favorite things about GitHub but also been scary. Maybe now that they have access to some. of the best security engineers and researchers in the world, they can fix this...
I doubt Go qualifies as a descendant of Pascal particularly with some of the things said about Pascal by the C / Go creators.
Honest question, why kit just get a DAP like one of the Higby, FiiO, Shanking, or Xduoo devices?
I agree about the humour, I even found it quite British! Maybe the author is being assimilated without their knowledge, and will soon become fond of aimless walks.

The people in the comments here seem to think this innocuous article is a personal attack on them or their hobby, or that people aren't allowed to have a good moan if they feel like it (moaning being another great pasttime of the British).
By accepting a reference argument, you introduce pointer deref. Wouldn't it be better to use

Widget && temp = complicated_long_function(...);
consume(temp);

Am i missing something?
I Consult, Therefore I Am (2012)
Actually the previous poster talked about sites for laptops supporting hackintoshes. I'd be very surprised if you find that information on any "official" website.
I enjoyed the article. I do think the author should take up photography though, if only to give those aimless walks a purpose :)
Optimizing for "simple" for the sake of robustness is exactly backward.

> visible and understandable

False. Something is neither visible nor understandable if it's misleading - which file extensions are. There are absolutely no guarantees that a file extension will match file contents, and that assumption can cause security risks - like in this article.

An actually good alternative is to encode file type as metadata, instead of inside the file contents or file-name, and then configure viewers to display it. That, while not "simple", is also visible and understandable to the user, while simultaneously being safe.
This is the best music app I've ever used on Android. Fast, , no ads, does not access the internet, great UI, low on resources and space used.

One of the few apps I enjoy using on my phone. Many thanks to the developer for making a offline music player and not introducing ads in it!
If it has DAC override, then it can read your credentials file just as easily as it can the environment.
>If it ignores part of the spec, I don't think "strictyaml" is the correct name here.

The article didn't fully explain it but strictyaml requires a typed schema or defaults to string (or list or dict) if one is not provided. So it strictly follows the provided schema.
I wouldn't argue that they are equals, but consider that the people you talk to might not care for the stated intents ("we will bring peace to the middle east because we're altruists"), but rather the obvious results ("we've removed stabilizing strong-men and now we have open chattel slavery back in Libya").

China is doing lots of shady stuff, and they too claim that it's for the best -- only in this case we (as in most people outside of China's sphere of influence) ignore the claims and look at the moves as as power plays with a PR narrative. The people you talked to might do the same for US actions.
It is closed source, but if privacy is your concern, it does not attempt to access the internet. You can log connections to check this or just inspect the list of permissions it uses in Android settings.
This, to me, isn't news. Any platform that permits free arbitrary code execution (so, Netlify, Cloudflare Pages, GitHub Actions, DockerHub automated builds, CircleCI, et al) that can access the network can be assumed to have been abused in this manner.
Sorry to burst your bubble, but combination locks aren't always safe either. I hope you don't have something as vulnerable as either of these:

https://youtu.be/n9Fqzq1yqbA

https://youtu.be/Fah-LJJaPWg

https://youtu.be/GqVkSOKiUpY
Nah. Come here for study, work part time, find sponsor, you're done!
I read several articles where the FBI says butcoin is the most traceable form of money. Sure you don’t know which person creates a wallet but then there is usually an entry point and exit point into fiat cash requires identity unless you literally sell your wallet on a thumb drive in person.
Is there a modern Forth-like that is usable in all modern domains like android, iOS, web?

More importantly, is it pleasant to use?
That looks like Windows XP based on the desktop icons and I'm quite sure that Windows 95 didn't support hibernation, it only arrived with Windows 2000 if I recall correctly.

Windows XP only came out in 2001, so if the laptop was from 1999 then it must have been upgraded to Windows XP at some point.

That text based progress bar shows exclusively for resume from hibernate, hence rubatuga saying it's "definitely hibernation".
Seniors can make the same mistake - I had one literally senior colleague argue that he's been coding for decades longer than I have (I was only coding for ~15 years at the time) and that I should just do as he says, but would not tell me why, or how that applied to the situation.
> “Everything’s a file!”

I fail to see how HTTP and REST's "everything is a resource" paradigm is significantly different than UNIX's "everything is a file" paradigm, and I'm yet to see anyone claim that the freedom and power to open any HTML document (OMG a file!) made available through the internet is a mistake or a bad design decision.
Several of the laptops mentioned are vendors who sell them officially with Linux support (system 76, dell developer edition, purism...) , so you either didn't bother or trying to create a false narrative
Hmm, but aren't these languages easily compatible with C and C++. I know in Ada++ you just have to link the library at build time and generate a pkg based on a header file.

func Foo (X : C.int) return C.bool
with Import, External_Name => "Foo";

I suppose though that you are right. A majority of modern programmers probably view sophisticated tools and pre-built packages (a la NPM) as necessities and hardly care about performance or code quality.
It’s a fun read but I concur with other commenters about it being a sarcastic rant about something the author doesn’t enjoy

It's the Guardian. The thought that anyone, anywhere might enjoy something means they want it banned.
Aren't you afraid of running such service on Google infrastructure and getting the ban hammer from Google?
Ah, tool centric (not centered in the person) time-offset (the ones making the original mistake doesn't see it) paredolia. Good 'el TCTOP...
What kind of nonsense is that?

Can't those who need a break take a few days off?

Now those who want to work can't.
"less talk, more rock" is how one of my colleagues put it.
I do functionalish programming on a 400KB RAM device using eLua and Wasm.

Lua is basically a Scheme with a different syntax.
Early-Bird-Release of Power-Tcl Compiler
Java had a massive push by Sun.
If you have a old java codebase, it is easy to "wrap" around a big proxy and continue to expand it in Java, without learning a new language.
Language library is quite well optimized.

I like Pascal but its scope rules are Crazy compared to C/Java/C#, nerveless Pascal compiler is reported faster than Java one
Publishing cryptographic signatures is, in my view, protected expression.

I have long maintained that cryptocurrencies aren't property: they're speech.
Push-ups, sit-ups and some aerobics is another option.
Show HN: Dead Simple Blogging Platform
Steps to crack your next System Design Interview
A Bill Gates Venture Aims to Spray Dust into the Atmosphere to Block the Sun
> I won't touch commercial situation with a ten feet pole either.
Why?
I mean, Delphi seems a good language... what prevent you from developing with it?
The way I would state it is that you need to understand the tradeoffs of given best practices and whether those tradeoffs justify implementing those best practices on your project. It also gets into what best practices should be prioritized over others and on what timeline.
That actually sounds like a much more healthy way to gamble than spending hours at the table/machine chasing dopamine hits. You can plan how much you are willing to lose in advance and more easily stick to it (rather than after hours of the game and casino feeding you chemicals).
Security Training for Engineers
>> if you pick a Mac you often care about the aesthetics of the chassis and display

I added a partition to one of my MacBooks and installed Linux on it, best of both worlds. It was surprisingly easy.
Thanks Nat. What if we made new GitHub Actions temporarily only available to users with a verified second factor?

Could temporarily reduce the population of abusers while we figure out a more sustainable strategy?
I have heard Canadians say it - so it’s your anecdata vs. my anecdata :)

Thanks to the replier who helpfully pointed out the saying originated in Scandinavia.
With my product hat on, I could see so much to improve in the computer-driven games like slot machines.

Everything about these machines has been painstakingly A/B tested to maximise their intended purpose - there was nothing that you saw that would be considered an improvement by those machines owners.
I disagree with most of what you said but I want to specifically call out:

> 3. Go on with a warning is a sane strategy in some situations.

No, if its sometimes ok, to continue, than you should not assert it.

Assert means "I assert this will always be true, and if it's not our runtime is in unknown/bad state."

If you think you can recover, or partially recover, throw/return appropriate error, and go into emergency/recovery mode.
Solving Electric Circuits