skysight-inc/HackerNews huggingface dataset:
> I do agree with the right for those people to hold that opinion and being able to talk with others about this opinion, without it ending up in huge fights and drama.

When one has the "opinion" that a group of people should be locked up for simply being who they are, then yes you should expect some backlash for that.
I think the bigger problem is that the work environment has turned into political hell.
Are we talking about the three US military videos that surfaced in recent years? I've seen all of them clearly and thoroughly explained away. In one case, you could literally use the numbers on the recording and some middle-school level geometry skills to calculate that the tracked object is a bird.

And it's quite easy to guess why these videos were released. They're technology demonstrators. The general public can think UFOs if they want, but what Chinese and Russian militaries saw was, "holy shit, US can auto-track a far-away bird from a jet fighter".
Eh, if the G3 has altivec suport it could play XVid videos perfectly.

If you got a MOV file with a MP4 video, OFC a G3 would struggle, but mplayer/mpv may be able to play it fastly if the resolution is under 720p if you skip the loop filter.

EDIT: Ok, just for G4 and up. Understandable.

Also, is NOT that impressive. You could watch XVid illegal rips just fine in 2002-2006.

Heck, even a Pentium 2@450 with NetBSD could do that seamlessly.
It is easier to keep an uninsulated wood building from rotting. Insulation slows drying if something gets wet.
Because Ubuntu 18.04 is used for the development environment, it relies on pretty old dependencies.

Bug report: https://github.com/Sysinternals/ProcMon-for-Linux/issues/44
Breakthrough Listen Project Scans 60M Stars, Finds Zero Aliens
What do you mean by nobody is doing that anymore? Isn't this exactly what a nature reserve is, they're all over the place. My family owned one of the larger forests in The Netherlands originally developed to sell timber but it was infeasible so the family sold most of it to the national forestry service, which is paid by the government to take care of the forests. Mostly by not cutting them down.
That probably says more about your chosen news outlets than the geologic stability of the US. There are faults all over, and even Tennessee gets quakes that can be felt in neighboring states.
Yes, because even when those implausible ideas fail, your more likely to learn something than when experimenting on an existing hypothesis with just a minor change.
Because much of the power of python comes from its libraries, many of which depend on C(++) extensions tied to details of CPython interpreter. It's very hard to write a JIT without breaking this.

For example, all the numerical/scientific stack (numpy etc) is extremely fast by being written C, Fortran, etc with a Python interface. If you break this in a JIT then the plain python might be faster but actual useful code will be much slower.

Additionally, one of the reasons C-extensions are so fast is because the CPython implementation is very clean which has made it easier to write stable and performant extensions.
Yes, you'd probably use Redux and wrap that API call in a dispatch(). I try to stick to the design pattern of "get a response from the API call if you need the data in that function, otherwise use Redux". I've created a library that really helps with this if you're interested - https://github.com/bluedevil2k/ruffle
I was hoping he was going to provide a list of examples.
Big Data = Big Failure
Aye, I am very much looking forward to that feature
Cyanide Fishing
Generation ships may not be possible, at least for biological lifeforms. Kim Stanley Robinson wrote his novel Aurora in large part to argue this.
No, because improvements don't scale that way.

320x200 was more or less where graphics started.
640x480 was much better.
720p was a lot better than broadcast TV.
1080p was a very nice improvement for a lot of uses.
4K is visibly better, but mostly eye candy.
8K is pointless for a desktop monitor.

The steps give you 4X the number of pixels. At 320x200 you're severely constrained in detail. You'd have a hard time for instance accurately simulating an aircraft's cockpit -- you don't have enough pixels to work with.

1080p to 4K is in most cases not the same kind of difference. There's little for which 1080p is actually constrained in some way and require sacrificing something or working around the lack of pixels.

This isn't because modern software design is bloated and sucks, but simply because improvements diminish. Our needs, abilities and physical senses are finite.
I thought this at first too, but after re-reading it became clear that they're saying IBM's process takes up the least room per transistor on average while Intel's takes up the most. So IBM is actually beating Apple by this metric here, however counter-intuitive that may seem.
My thoughts as a maintainer of a HTML sanitizer in Go https://github.com/microcosm-cc/bluemonday which is also available to Python via https://github.com/ColdHeat/pybluemonday

1. Sanitizing is not difficult, defining the policy/config is.

This is difficult as your need is not someone else's. First glance of this proposal is that this needs a lot more work to cover people's needs. It's good enough, but will have a lot of edges and will need to evolve.

2. If you allow a blocklist then it will be less secure.

Because people will use that by default as it's easier to say "I don't want <blink>" than it is to say "I only accept <long list of things and the myriad of when attributes are valid on which elements>". The problem here is that a blocklist requires the person writing the config to cover every scenario to be safe and unless they're a security engineer they will not... and if they were a security engineer they'd use the allowlist. Blocklists seldom deliver good security, allowlists deliver great security.

3. Provide sane defaults.

Most engineers simply do not know what is safe or not. I ship a policy in bluemonday for user generated content... it is safe by default and good enough for most people, and it can be taken and extended due to the way the API is structured so can cover other scenarios as a foundation policy.

-----

I think the proposal in general: specify a standard for a sanitization API has merit. But mostly it has merit if it specifies a standard for defining sanitization policies/configuration, allowing them to be portable across different languages and systems.

The one I wrote is very heavily inspired by https://github.com/owasp/java-html-sanitizer which is the OWASP project one maintained by Mike Samuel. When I did my research before writing the Go one, this was far and away the best way to construct the policy/config and I already saw that this perspective was more valuable than whether it's a token based parser (GIGO but low memory) or a DOM builder (more memory)... no-one cares about the internals, they care about expressing what safe means to them.
There are 3 correct ways (and 1 incorrect way) to secure your strings in a web application:

1. Output escaping (server-side)

2. Output sanitization (server-side)

3. Output sanitization (client-side) - i.e. this standard

4. [Wrong] Input sanitization (server-side) (not to be confused with input validation, which is good but unrelated to this conversation)

Without boring with the details of why 4 is wrong, normally you should choose either 1, 2 or 3 depending on different applications:

(1) should generally be used in almost ALL cases. Contextual escaping is orders of magnitude more secure than sanitization, and is usable by any application not rendering user-provided rich text.

Furthermore, most/many user-provided rich-text applications use a DSL like Markdown which sidesteps the need for sanitization, so you can use escaping for these cases as well.

(2) should only be used if you are rendering user-provided rich-text. These cases are quite rare, and chances are if you need this feature you have a large application with lots of experienced engineers and you have the resources to put in place appropriate caching mechanisms.

(3) is the same as (2) but offloads the work to the client (no caching necessary) and has a resultant negative impact on the performance of your app (client-side UI latency). Making browsers fast is already a gargantuan challenge for browser-makers; adding client-sized sanitization to the mix will exacerbate this.

But mainly, this new standard will encourage inexperienced engineers to use (3) where (1) is much more secure for most applications.
In the realm of entrepreneurship, I think domain experts who also risk tons of their cash on crazy ideas should be looked at even closer.

Y Combinator and Tesla were seen as stupid and crazy for a long time. Meanwhile I’ve seen a lot of domain expert entrepreneurs do really crazy things that lead nowhere when it’s VC money instead of theirs.
Pattern matching in rust:

match x {
<cond1> => <expr1>,
<cond2> => <expr2>,
<cond3> => <expr3>,
_ => <expr>,
}

let message = match maybe_digit {
Some(x) if x < 10 => process_digit(x),
Some(x) => process_other(x),
None => panic!(),
};

Seems useful. Python's getting match soon too!

https://doc.rust-lang.org/reference/expressions/match-expr.h...
There are many built-in functions that could also be accomplished with a one-liner akin to your example.

I hear what you're saying - there's an easy manual workaround for this requirement - but a built-in function would still add value nonetheless.
I think we should all be engaging in this topic critically and openly. With curiosity rather than certainty, when none exists. I think we should not be so casual or strident in just dismissing or discounting other human beings personal experiences. Especially when there are so many people with stories. These humans are valuable, and their stories are valuable. We shouldn't dismiss that, or disrespect them. But also, in aggregate, with other evidence, we should consider it and be curious. Not rush to conclusion either way. Be wary of the theorists and commentariat, but be curious about it. I think you see this, that's what you're saying too, I think. Except the "default toward not existing" is the crazy thing. You should just default toward "not understanding". To me, being sure that it's whatever your theory is, and being sure that it's all just fabricated, are both equally wrong. Just calmly face the evidence, think about it if it interests you, don't rush to opine.
I don't think I've even seen a link to LiveLeak scroll by in 5 or 10 years, but I still had a visceral reaction to seeing the name on the HN frontpage. Saw some really traumatic things on there in the mid/late aughts.
Hopeful new lispers beware that core.typed is not so easy to use as TypeScript, and slows things down quite a bit, and you will need to write a lot of type definitions for 3rd party code. Most (all I’ve seen) clojure shops instead rely on runtime type checking with Spec or Schema, both still popular
There are a few such things.

The most comparison is core.typed, which literally just adds static (gradual) typing to Clojure. That said, I think that's a misleading comparison, and less useful than it is for TypeScript.

If you're willing to relax the definition to "static analyzers that find similar issues to what TypeScript might find", there are a few that require very little input (but are less powerful in finding these types of bugs, more powerful in finding others) like e.g. clj-kondo or spectrum.

One fundamental challenge is that the idea that you should mostly just pass data around, ideally maps, and those maps should be open for extension, is very core to Clojure. You get a lot of benefits from that, but the idea that anyone can add stuff and that's OK also makes it difficult to detect that some accesses are _not_ OK.
I don't agree with #1. Why would it be surprising government incompetence? Government is not one person with infinite knowledge, plenty of them are elected officials with questionable level of understanding of various phenomena.

Most sightings can be easily explained with misinterpretations and mistakes just like Mick West shows.

Recent number of videos (gimbal, tic tac, ...) are probably released to muddy the waters and the Navy knows what they are showing.
It only gets a 74 when I paste it into Grammarly. Clearly Steve was a ho-hum communicator.
Kind of like how, if someone's last name is Ashkenaz/Ashkenazi, you know they're a Sephardic Jew.
No, not about working hard. Digging a hole and covering it up is working hard, but helps nobody.

Money essentially is promises by other people to provide its holder with goods and services, in return for goods and services that someone once provided them with.
So have a global switch to turn off the ability to even ask; hell: make it default disabled for all I care... solving your petty "I don't want to be bothered by pop-ups" issue isn't even remotely complicated, and that this is a continual refrain preventing the world from having fully-functional applications for software you apparently don't want to use anyway is not just ridiculous and demoralizing, it is shameful.
The notes on the TC39 meetings look really nice. Hopefully this will make it easier for people to get involved.
How is this supposed to work really? The President is not above the law (as Justice Kagan famously put it 2 years ago). He can't just suspend the patent law. He can ask the Congress to revoke the law, but that would be going forward, it would not act retroactively (as per the Article 1 of the Constitution). Let's just say the President issues some type of Executive Order to overrule the patent protections for the Covid vaccines. Would the companies not sue? Would they not go all the way to the Supreme Court? Would all the courts agree with the President that he can just make the law go poof when he feels there is a moral obligation to do so?
I’m a huge fan of Korean drama. They often have great acting and stories with a lot of plot twists. Netflix has a big selection.
You say that C / C++ is bad. You assume that there are alternatives that are just better. I think you are wrong.

Why? The short answer is: there is no free lunch. There is no silver bullet.

C / C++ has huge pitfalls with its memory management. But it is also a well-designed programming language with a great balance between efficiency and comprehensibility (and all other features of a language).

Every design decision in a language is a trade-off. And the trade-offs in C / C++ are so well chosen that there was no easy improvement for decades. No low hanging fruit. A C programmer has to understand much more about memory management because there is no virtual machine / garbage collector / interpreter running which takes care of it. But for that you get efficiency that is not possible by design with the other approaches.

For me C / C++ made the best trade-off.

Until Rust came along. Rust wants to make the memory management 10% better than C++ with 0% loss in efficiency. That is huge. No one reached something similar in 40 years. I am sceptical because this is such an ambitious undertaking. If that really works in real life I will be impressed.
i truly believe that when you have a large enough "vocabulary" ( and languages in general are fantastic for that, foreign languages, programming languages of different paradigms ) the better you mind can grasp new concepts.
A few years ago I built an adapter to allow classic Mac CRT's to be used with BeagleBone or Raspberry Pi systems ( https://trmm.net/Mac-SE_video). X11 has supported 1-bit mono displays since forever, so it mostly worked out of the box with well written programs.

Watching youtube videos in 1-bit is an amazing aesthetic. Unfortunately all of my videos of it were on vine, so this Muybridge-esque cat video seems to be the only one that I cross-posted to twitter: https://twitter.com/qrs/status/1045272076750401536
Verifying a New Configuration Version, with the Version Preview Function in DTM
The Science to a Winning B2B Sales Message
File under: Governance is technology

Direct democracy (initiatives) and neutered executive powers were the Progressives best efforts to counterbalance machine politics. It was worth trying.

We're clearly overdue for some more tweaking.

After binging on David Graeber's notions about participatory democracy, I've been wondering about replacing the meme of "elected representatives" with "delegated advocates", and what that might look like.

Maybe a bit like lawyers (barristers) representing clients.

Maybe a bit like merging the currently (nominally) separate roles of legislators and lobbyists.

Maybe a more clear division of responsibilities in bicameral governments, where the younger House advocates for changes and the older Senate tries to hold it all together. Like better rules for progressives battling conservatives.
> Basically, I prefer to depend on HTML as little as possible for user interaction/behaviour.

I prefer to depend on the user agent for user interaction and behavior. Javascript and all its potential for tracking, malware, side channel exploits, etc. should be abolished from the safe web.
I really don’t understand the distaste that many Europeans seem to have for wood. It’s an incredible natural composite material and trees are basically the ultimate renewable resource.

Particularly when combined with modern building science, there is absolutely no reason that a modern stick built house cannot last for hundreds of years and be energy efficient.
Fake Your Next Vacations
So... they just got tired of it?
Just replace English by French in my example, it's the exact same thing but applied to here.

> compulsory classes don't get you anywhere near native proficiency.

It gets you good enough to explain yourself and speaking. You don't need native proficiency.

What you need is to practise it afterwards, if multiple years go by. Even native dutch speakers that went abroad don't speak dutch anymore well by lack of repetition over ( a lot of) years.

PS. My original reply was not on a question. But on the statement quoted above.
That makes me wonder where my Minolta Maxxum 7000i 35mm camera and lenses are....gotta be in a box somewhere.
Is Docker Dead in the Water?
Microsoft is finally ditching its Windows 95-era icons
I'm a senior eng out of work for a year (per my own choice) slowly looking to get back into the market. These points are my own:

- My managers have always been a point of friction. If you hire an expert, stop telling them what they do and don't know. I'm afraid of full time work because of incompetent managers or tech leads.

- I don't care if your company is a unicorn. I care that I'm going to be happy doing the work that I do.

- Agile is a time stuck and time waster. Proudly advertising it as your Modus Operandi is a sure way to get your cold-email dumped in the trash.

- If you're approaching me claiming you've seen my work, you better not mention a technology I haven't used in a decade. I don't care, personally, if you've done your research on me, but don't act like you have if you haven't.

- My #1 priority at this point in my career is being comfortable - in work and out of work. Showing that the company cares about that - work life balance, good pat, etc. - is a little thing but helps a lot in recruiting people like me.

- I'm probably not with your product or service's target demographic (yes, even if it's some fancy SaaS). Don't knock me if I'm not. Most senior engineers I know of don't like SaaS products and tend to keep things fairly vanilla to retain control over the system. We're probably not going to use your service in our personal lives, and that's okay.

- Working remotely, especially these days, is almost a must. I want to be with family, especially now that we're making some life altering changes to catch up after the pandemic (moving, new jobs, getting married, etc.)

- Stop drowning us in processes. The more we have to play around with your gold-plated project management system, the less we're interested in writing code for you. Remember that a lot of us get by with GitHub issues and nothing else.

- A lot of us are tired of the industry. Going to be real. If you can figure out that problem, you'll be fighting us off with bats.
Clubhouse Struggling
You cannot put a price on career-long isolation from office politics
Why Is Cloud Infrastructure So Complicated?
Yeah, I'm also a little confused. I'm in Germany, but the market for contracting isn't actually a huge deal for a lot of companies. I know a lot of Freelancers but they couldn't even work at 3/4 of the companies that employ software developers (at any level). Most of them are contracting for large businesses, and often for months at a time, but the overlap of "is available for fulltime/is available for contracting" is kinda miniscule - and on the other end of the table there might be some companies that would want to employ a contractor they like fulltime, but just as often they wouldn't as it's just a time-limited "overstaffing".
No, Intel's 10nm is a bigger process, lagging behind TSMC's 5nm, so its per-transistor area is bigger.
I interpreted"flying on instruments" as employing an abstraction-layer (insulative, enculturated, solipsistic even) vs direct-observation.
The Dilbert take of "Wanna play another game of Hide The Pellet?" comes to mind.
Everyone is different. Senior engineers tend not to be young and usually have families and want to live in cheaper areas/countries.

Of course it's subjective, but I'd wager more senior engineers would want remote work.
>Reviewers didn’t dispute the science, but they expressed concern that the findings might deter people from protecting themselves against the sun.

This is truly bothersome. Science should only be a hunt for the truth.
I contracted for 10 years, then switched to a full-time job at a unicorn. Salary-wise, I calculated my yearly netto for the last contracting year, and submitted it to the HR as the netto salary I want to have. They approved in a blink of an eye.

The main problem with contracting is lack of career path and random, not very interesting projects where the contractor has little say.

The downside of employee life is non-technical meetings, personality trainings and yearly reviews. They make me feel like a kid.

I also miss the luxury of buying VAT-free tax-deducible gadgets.
This can be fixed without inventing a new system. Someone else in the thread gave an example of a mayday call that eliminates those issues.

In any case, it's easier to figure out if the person meant east or west (or check both) than to figure out if they meant flour, flower, floor, lower or some other similar word. It becomes even sillier when you account for accents. I'm not sure how to pronounce certain English words, including flour.

> If I read the "-" as a negative

That shouldn't be a problem, since you'd hear the words over the phone, not in a HN comment.
If a “Crazy New Idea” (CNI) is getting VC funding from establishment tech capital to deliver a twist in an existing product, it doesn’t seem like it could be so crazy.

Reading this I thought of CNIs like the Internet of the 1980s, women’s suffrage in the 19th century, Project Mercury, The Eiffel Tower.

The CNIs gaining ground today in tech seem to be crypto, brain-computer-interfaces, quantum computing, and CRISPR gene editing.
If there was a similar offering as mighty for certain development tools including Xcode and android studio together, that would be awesome and something I would look into. Basically something which would reduce the build times.
> in the U.S., we have [...] moral fiber

It's so hard to take you seriously when you make claims like this. Nobody cares about your founding documents, folks look at what the US does. And what it does is send drone strikes to hit schools, it bullies countries into doing what it wants without offering anything in return, etc. I genuinely cannot currently see a worse superpower.
> plenty of houses approaching 100 years that are just fine

This is such an incredibly low bar to be citing as an achievement!

I think a lot of Americans can't comprehend that if you build from a permanent material like brick or stone the house will just sit there for a thousand years.