skysight-inc/HackerNews huggingface dataset:
> I think the big number 1 that trumps all others when building a person website is: focus on writing content.

> This is by far the hardest part. All the other stuff: it's just tangential. Wordpress, Blogger, Jekyll, Hugo, Medium, hand-written HTML files: IMHO it doesn't really matter if you don't have any content. Just use whatever is easiest to get started with and gets out of your way when writing. For me, personally, it would be writing Markdown in Vim and converting that. For other people, it's something else.

This is why I find the quest for availability of anything (as opposed to the old world where everything had a high cost to entry) is mostly bad. It's easy to push out noise. Maybe that comment is noise too though :)
...but the APK file never existed if the app was shipped as an app bundle. The APKMirror people seem to claim you will at least need a special installation app to install the bundle components, which is fine for now as that app can be an APK, but... this is feeling sketch.

https://www.apkmirror.com/apk/apkmirror/apkmirror-installer-...
Well Poland had the brilliant idea of attacking https://en.wikipedia.org/wiki/Polish–Soviet_War, right after the end of WW1, so I am sure there was no love between them.
>Everything is very straightforward and understandable, the next step is always clear, I can spend an afternoon grinding out those 500 lines without thinking too much. But then I look back at what was actually accomplished in that time and it feels pathetic.

I sometimes feel that also, but strongly suspect it is a way of thinking that omits very important parts of the equation. When you build things, most of the time you're not spending writing code, but deciding what code to write. That is the work you want to optimize and Go makes that simpler, I think, as it is often obvious how something should be done in Go. With e.g. Python, there are too many options and that, I suspect, actually slows you down. For me, using Go feels like steady progress all the time, while e.g. JS development involves short bursts of productivity followed by long contemplation and sometimes backing out or refactoring a lot of stuff. Could of course also indicate my JS skills suck I guess ;)
The judgement was against Microsoft, that ruling can’t be applied to the rest of the industry. As for Apple, there’s too many caveats needed to describe the market they have a monopoly in.
No tinfoil needed here. This is exactly what is happening.
> If you have a slower spinning HDD journalctl -eu <service> takes 10-30 seconds (not an exaggeration).

That's because you're asking for a log of a service since logging began, which may well have been months worth of logging. You're saying "give me everything that happened ever to this service in a pager, then scroll down to the bottom".

If you want tail -f, use a -f: 'journalctl -f -u <service>'. That's going to be a lot faster. You can also use '-b' to make it return a log of what happened since boot (worth looking into the manual for the details of that one), or specify a start date with -S, like '-S yesterday'.

> Someone could have standardised a line based logging format

And what were they waiting for? In the end, systemd did it, but it's a pretty recent invention. There was plenty time to get there first.

> That's a log daemon problem that I haven't found to exist with any log daemon I have used.

Because log daemons classically don't care about this at all -- it's a problem for whatever reads the files that the log daemon generates afterwards.
Symbian used have something like this called Symbian Signed. It was a complete pain in the arse and probably one reason why hobbyists barely ever wrote programs for it.
I know this won't change your mind, but the reason you are seeing new terms is, because you're seeing the birth of new protocols. Pictures yourself in the early days of the internet and you want to learn about http and/or javascript (for example) - you would be overwhelmed with new terminology to concepts that didn't exist before like gui based web browsing. Crypto/Defi are this in many ways. Does that make it not a scam? Maybe, maybe not, but don't let the new terminology startle you.
It tried when the mounting failed, saying it would drop me to a shell and then said "it fail to open up a shell".
People get so hung up on the word contract. Might as well spend time arguing that rodents make for bad I/O peripherals.
Yes, it's a very lucrative field for those that are good at it.
The Last CPU - HotOS XVIII: Hot Topics in Operating Systems (2021) [pdf]
What do you imagine that ratio shows? Different projects use issues differently, so that number isn't super comparable...

And I've also noticed that low-level systems projects generally attract relatively few stars (i.e. a javascript library or go library will have more stars than a well used c library or systemd). My theory on that is that the people involved in projects like systemd, gnu, etc, see github as mostly just a git repository host, and don't bother with stars etc.

I guess from my perspective, I put zero weight into the stars on a project, and issue count only matters in the context of how the project deals with issues. What do you see as "worrying" in there? Do you see more value in those numbers than me?
It's called a "smart contract" because it's programmable (Smart) and can be executed based on specific conditions (Contract).

I've seen/read somewhere that Vitalik regrets naming them "smart contracts" though.
So that really seems to be the core of the problem to me: nobody really wants to seriously maintain udev as an individual project. It's not a fun or glamorous project to work on, it's boring, nobody will notice it unless it breaks, and nobody really seems to care that it depends on libsystemd. For most people this is just an implementation detail. For an embedded distro I can't see why you would use udevd or eudev, you probably want a much simpler device manager without the giant hwdb.
A tool to automatically resize pictures in the media library to the grid layout you define in your Wordpress theme: https://responsive.pics/
DNS + NTP are completely optional, but you get really good integration with systemd-networkd's DHCP client if you use them. Switching network is completely seamless, and the resolver updates fully automatically (direct DNS and NTP are blocked in many networks, sadly). Also, you get something that works out of the box, with essentially 0 configuration. You can't even install a system today over the internet without setting the time, and systemd-timesyncd does it with 0 configuration.
Similarly, in Portuguese you can "have" or "be with" various nouns reflecting physical, mental, or emotional states which would be expressed with adjectives in English, like "I have hunger", "I have fear", "I'm with fear", "I'm with jealousy", "I'm with yearning for him".

I know German also uses "have" this way quite a lot (at least for hunger, thirst, fear, and desire, probably for many other things).
Most of the controls in Vandal are designed to allow quick navigation to specific snapshots. But I do see a use case for a feature like "jump to year" .
Symbian also charged developers high fees to access certain special APIs, doubly ensuring the death of their platform.
Smart Contract Democratization
Hello everyone!

My team and I are working on a solution to democratize the understanding of and the creation of smart contracts. If you want to join us on this mission, come find us at: https://www.lokicode.io/
> I'm sure Twain never thought about how ridiculously hard many English words are to spell

I'm sure Twain was well aware of it, and wrote the article on the awful German language tongue in cheek for amusement, rather than as an actual complaint.
Actually signature scheme V3 supports multiple keys.
I like the satisfaction to manage my proper website and tools. It's like building it's own chairs, I could maybe find better furniture for a better price, but there is a pleasure to make its own things without depending on other services. It's a matter of choice, but for these reasons for a personal website without high availability requirements, I prefer servermore and high-code. =)
This was a bug in udev.

The right people to lead the effort on fixing bugs in udev are the udev maintainers.

If people did not wish to have the responsibility for leading the effort to fix bugs in udev, they had the option of not taking over the maintenance of udev.

I agree with ohazi, above, that the world would be a better place if the systemd people had availed themselves of that option.

(To be fair, it looks like this issue was fixed a few months later by someone who knew what they were doing. So the main lesson here may be something more like "@poettering should not be triaging udev bugs".)
You’re Wrong About Prohibition
while I think it is important to remind people of those

but then we're going to post every variation of SE on HN?
In Defense of WeWork’s Community-Adjusted Ebitda
Plotting the source code “TODO” history of the most popular open source projects
Exacting
These comments always confuse me, because the US troops in Germany, Japan and Korea are there entirely at the pleasure of the local government.

If Germany ordered US troops out, they would leave. Even Iraq, barely a functioning country, did this, and the US left. But Germany, Japan and South Korea have not asked.

And you might say, "well, the US is functionally bribing them with the economic boost of stationing troops there". And... OK? That's the tradeoff. Germany is a wealthy country, and the populace can vote and make choices themselves.
> 500 lines

But line counts are nearly meaningless. Something like a quarter or a third of those lines are going to be a single closing brace character. So mostly we’re saying that Go’s style involves a lot of beeline characters, but that doesn’t tell us much about even boilerplate much less complexity. And to be quite clear, Go does have more boilerplate than many other mainstream languages, but line counts are a particularly bad way of measuring it.
Then what's the point of smart contracts? If you always must have some form of repudiation/reversal mechanism, you might as well go with the traditional contracts.

You could argue there will be lowered costs in the happy path where nothing goes wrong, but I'm not sure that's valid since the underlying software still needs to written/supported by someone.
Exactly, look at all the free blog websites, medium, wordpress.com, blogger, etc. They are filled with tons of low signal noisy posts of people with nothing to say. It really makes discovery of good content harder, not just for me as a user, but also for the platforms to highlight that. Most often I get good stuff from websites without any styling, just plain text hosted on a little box under the desk.
> hex / base64 / json / xml

Literally everyone. Go is not exactly a stand-out XML handler either.

> TLS (1.3) / x509 / aes-gcm / sha-2/sha-3 / X25519 / ECDSA / ed25519 / crypto.rand

The prevailing idea even within the Go community today is that probably too much of that is exposed and instead the stdlib should be focusing on higher-level primitives.

> http / html templates / json-rpc

Go's HTTP stack is very good. Most languages do have a worse one, though.

The templating language is interesting, I'm glad it's there, but I think there will be widespread dissatisfaction among developers coming from other languages within in the next few years and you'll see it languish in favor of a 3rd party library. I would not choose a language based on its stdlib templates (and if I did I'd choose Perl).

I bet they will come to regret jsonrpc in stdlib.

> big integer math, zip

Table stakes.
A "smart contract" is a computer program that manipulates balances on a ledger. There is no way you can use that to hire someone to perform a job because this isn't something that can be expressed in terms of balances. You would need an actual contract to do that. Also the parties that interact with the so-called smart contract have no agreement between them. What could they possibly have a dispute over?
There’s just so much in this podcast, origins of cocktails, powerboat racing, Nascar, welfare, women’s votes.
This is before the recent change in bank transfers that requires account name to match account number right?

My understanding was that change basically closes the majority of these scams (where the account details are substituted) as you would now need to create an account with a name you don't have ID for which is very very hard.
> because nobody likes to lose their live savings because they missed a semicolon.

Yeah, but shouldn't it be possible that these things will be avoided by confirming the validity of the code with theorem provers such as Coq, Lean, or something similar, at some point in the not too distant future? That's what I've been wondering, without currently having any stakes in the game (and probably not until there's compelling mathematical proof of security)
yes. haha!
I found that I wanted something really specific, and built a tool in Go that lets you write, modify and use plpgsql functions as if they were regular source code files rather than database objects. You can write them as Go packages, import those packages into other Go projects, and write tests - without maintaining migration files for anything other than the tables. Combined with IDEA’s plpgsql language support it’s made me super productive.

I’ve used it very successfully in production for a few years and have been curious if anyone else would find it useful enough for me to open it up.
You do know that the US has been caught intercepting Cisco switches and routers… installing comprised versions of ios and then repackaging and resending to the original destination.

Think the worry is google (and perhaps certain US agencies) will use this new requirement to do essentially the same approach with certain apps.
Please check: https://terrainformatica.com/2021/04/25/sciter-uses-javascri...

Mainstream Sciter now uses QuickJS of Fabrice the Magnificent (https://bellard.org/quickjs/).

QuickJS complies to ES2020 specification. And Sciter exposes most popular and modern DOM API so MithrilJS, PReactJS and other libraries work as they are.

Sciter implements far not whole set of DOM API - just essential ones. In fact DOM API and so browsers are full of garbage - old historical layers of stuff from initial Netscape JS API, IE6, etc. For example there is no XMLHttpRequest but there is Fetch API : https://developer.mozilla.org/en-US/docs/Web/API/Fetch_API

Sciter goal is not to support browser API as it is - with all its bells and whistles, after all desktop use cases require features that are not available in browsers anyway.

But all non-UI libraries from NPM collection should work as they are in Sciter. Most of pure Vanilla JS UI components should also work as they are, for example LeafletJS (maps) https://sciter.com/sciter-js-runs-leafletjs-as-it-is/

Also Sciter provides rich set of built-in components like JSX, Reactor, Virtual List (https://sciter.com/behaviorvirtual-list-for-sciter-and-scite...) and others.
Even as a crypto maximalist I believe code can create tyrannies of it's own kind. Take the example a story posted on HN some time ago of code Hertz wrote reporting cars not turned in as stolen and getting people (unfairly) arrested.

If I call my bank, they can fix a mistake, no matter how bad, because they own "truth".

I think what will end up happing is every contract will have the ability for some authorized key to make arbitrary movements of tokens amongst custodial accounts and nobody will build contracts where anything is moved out of custodial accounts until there's been multiple authorizations. Sort of how I transfer money into Gemini, I don't just trade from my personal checking account and they won't transfer to my checking without some authorizations. Look, I know I'm not being sophisticated here, I'm just saying, you need a way of un-fucking a fuckup and if someone can abscond with tokens easily because of a small logic flaw that doesn't work writ large.
Which personalities are you referring to?

I'm curious about what you've picked up as well. Like people not being able to explain why they're into it. Could you elaborate on those things a little bit?
> ... the urban infrastructure of today could use more of these small touches of aesthetics around. Why does everything modern have to be so boring ...

I can't help my overall perception that nearly every single fixed item in the public space (including buildings, lamp posts, benches, door fittings, fences, pavements, ...) has these unbearably boring asthetics today, compared to the design of a few decades ago. Back then, many of these things had textures, ornaments, and other elements that gave the eyes something to look at and hands something to touch.

Almost everything that's put in the public space today is boringly sleek, agressively glossy ... anonymous brushed stainless steel ... a lot is made up of simple primitive forms, planar, spherical, cylindrical ... that's it.

Yeah, they probably do cost less, these minimalistic designs ... but do they really in the long term? Don't they get replaced more often (because noone cares about them anyway) with something new yet equally bland ... more often than those old designs that were richer in details?
This passage describes a really different situation though.

Say I have a USB Stick with important data on it. It has a warning label on it that says "if you plug this in, it may destroy your computer unless you have the correct password file.". If you plug it in (and your OS is vulnerable) it wipes all drives (including itself) it can find unless it finds a particular password file.

Is this USB Stick illegal?

Signal made it very very clear that scanning their users with Celebrite tools might trigger some behavior. Now if you still go ahead and use this tool can Signal be blamed, despite warning you that this will occurr?

I find all of this far from obvious. What Signal did is purely defensive _and_ clearly labeled. It's very unlike the examples cited so far.

(And after all we are talking about a scenario where the cops can still get the evidence simply by taking screenshots of the open app, so they are not even preventing cops from getting to the evidence, merely making it more inconvenient.)
No, you just categorically don't understand. libsystemd is not systemd the init system, it doesn't require systemd to be running, it is simply the name of "the shared library that everything developed under the systemd project uses for common code." Now, you can argue until the cows come home that you'd be happier if udev, systemd, and libredhathatesyou (or some other name for libsystemd that doesn't include systemd in it) were all in different Git repos, but since you can run udev without a dependency on systemd running on the system, that seems like a pretty low-stakes dispute.
The canal undergoes improvements often, being last widened in 2014 and it will be widened again the future. The latest incident helped spur the current widening, but it would have happened anyway. The issue is the canal is too narrow for the largest of modern ships, which are much more massive than what the canal was originaly designed for back in the 1850s, thus it has gone through widenings and other improvements to support modern shipping and this process will continue.
Higher density means faster computation but also potential overheating issues. If the clock frequency is the same of course.
It’s not even an interesting or novel social engineering attack.
> a supplier called McCormick

Funny to hear it described like this. The McCormick in question is almost certainly this one:

https://en.wikipedia.org/wiki/McCormick_%26_Company
I have to admit still being confused about sweetmeats. If a Brit uses the word, are they talking about a specific type of candy, made in a specific way, from a specific type of shop? Does it need to be baked? Or have flour? Or does a Snickers bar count as a sweetmeat? Or a gumdrop? Hard candy? Or is it more like something from a bakery? Indian sweetmeats also seems to be a thing (from an image search right now). What's the difference, if any? Is any of this related to Turkish Delights?

I don't understand the connotation of the word, as much as the meaning of it.
If it weren’t for shareholders, the company wouldn’t even exist. Who do you think kicked in the initial capital for the company to get started?
Isn't it Tether itself who "wants USDT"? That's how they maintain the peg.
Most definitely, the power of aggregation! woofy
nice domain you got there
Good thing you're using the past tense, as he's published source code for both black books:

https://fabiensanglard.net/gebb/index.html
Disagree. If a developer signs a build, then I can verify the build came from the developer. If it is signed by Google, then who knows what may have been inserted into the app. This is especially bad for open source and security conscious apps.
Could we add a comment to those old threads noting the full story and linking to this new thread?
Be More (Super)Human
Yea if you want to spend millions if not billions to 51% attack it and the public nature of bitcoin is such that everyone would know who attacked it leaving them legally liable then be my guest. There is more incentive not to attack it than there is to attack it. when will people realize this.
Theorem provers require code for defining what you want to prove and the method through which you reach said proof.

Proofs and theorems can have bugs.
if it went to court, i am guessing presuambly under a plea deal the hacker would be required give back all or most of the crpyto to rectify the 'mistake;' if not, it would prove intent to steal . For example, there is the 2005 Sammy MySpace XSS incident. Technically, his code was interpreted by Myspace as valid CSS/html, but was still guilty due to intent.
They are database triggers, but that's not enough grandeur for cryptoheads.
Indeed, I'd say this Tx/power is the most misleading metric here. Bitcoin is slow (7tx/s) compared to what for example Algorand boasts they will achieve at the end of the year (25000tx/s).
I’ve gone back and forth on this myself, but I think it is valid to consider the cost of the entire network as a matter of carbon accounting. After all, one of Bitcoin’s selling points is the difficulty of a double-spend. This wouldn’t be the case if Bitcoin mining was not subsidized from the pool of unmined coins.
I see people saying this kind of thing often in open source and I think you are missing the point here: who is going to fix this bug? You can say systemd developers shouldn't triage it, and then you're left with nobody to triage the bug at all. So what will you do? The point is, they don't own the hardware, they can't fix the bug. You have to find somebody who actually does own the hardware who knows what is going on, which seems to be exactly what happened. But if you get unlucky and if zero of those people are contributing to udev or any of its forks, then the bug probably won't ever get fixed.
That would cost an arm-and-leg, it would need to be done by someone who actually understands both the theory of proving algorithm corectness and the algo in question and systems like CoQ are from being able to prove large, complex systems.

All the while traditional "non-distributed" finance simply uses sound engineering practices, such as code reviews, audits and sign-offs at much smaller cost and without requiring specialized PhDs in multiple unrelated fields.
The reason they are doing this (keeps getting buried) is because they want to change distributed APKs, shims, etc. so they have the right packages and deps per device, and can ensure that what they build is what is accepted on the device and not some other random thing.

So it is working as intended if what is installed on some device is not what the Dev built.