skysight-inc/HackerNews huggingface dataset:
> You’re screwed either way,

Not really.

If the application terminates, it is infinitely easier to catch this during testing.

If the application silently continues, that might be an exploitable security vulnerability, might result in corruption of pretty much anything (data-bases, loss of user data, ...).

Pretty much everybody with an exposed web-server would prefer it to terminate with a nice debug message over the alternatives that using raw-pointers would cause.

> you’re writing code that is unsound.

No you are not, code using offsets is perfectly sound because it does not exhibit undefined behavior (which is how "soundness" is defined in Rust).

Your suggestion of using unsafe instead of offsets here would indeed be unsound. Don't do that.

> but avoiding unsafe and writing code that blatantly panics at the drop of a hat is ridiculous.

This is the most retarded thing I've read all day. `assert` is a tool used on _many_ standard library API to ensure soundness.

> I don’t care how; if you’re not doing that and just assuming your strings are shorter than 256 characters, you’re writing code that is unsound.

I really have no idea why you sound so angry, but the claim that someone anywhere in this thread is "assuming your strings are shorter than 256 characters" is completely made up. Nobody has suggested that.

The offset optimization that the OP proposed is trivial to implement correctly even without bound checks (just put an assert on the methods that take &mut self to ensure that the string doesn't grow beyond that).
More steel/thicker/different steel is expensive, as is say some other material like carbon fiber composites .

We could make a much bigger , lighter efficient ship with carbon fiber entirely, however there is no economic incentive to spend 100x on the ship, fuel costs and economies of scale rtc don't help recover that capital cost
Your two suggestions have more positive effects on the society than cryptomoneys.
We cant even criticize Israel online. Censorship is war crime
I guess I must be pretty lucky or something. I've been running Debian testing with Gnome on a Lenovo X1C5 for a couple of years now (it used to run Win10 but I got fed up with the forced updates) and the only time I find myself tinkering with it is when I get bored and want to change things up. Go figure.
They have repeatedly widened it since it was built to accomodate larger ships.
On the other hand western Europe is the biggest donor to the Palestinians [1].

There are words and then there is action; If the (Arab) world wanted a Palestine state it would have been there by now.

[1] https://en.wikipedia.org/wiki/International_aid_to_Palestini...
Telemetry doesn't guarantee that people won't pull numbers out of their asses. There are lies, damned lies, and statistics.

Designing good telemetry is hard, interpreting the data well is harder (and it's tempting to cherry-pick post facto to justify your decisions). Are users not using functionality X because it's useless or because there's some other issue preventing its use? Or maybe users just don't know that it exists?

Crash reports are more of an unmitigated good IMO however, since they can be used to pinpoint the source of crashes and identify regressions.
Windows 10 Enterprise LTSC (long term servicing channel)

While you can buy individual licenses from companies like CDW, some just get it via file-sharing.
Linux and open-source communities rise to Biden's cybersecurity challenge
> The only Japanese I'm aware of where a significant minority are against the US presence is in Okinawa where US bases occupy double digit percentages of the available land.

"Only" makes it sound weird considering it's in major parts these Okinawan's that have to pay the burden for the massive US presence [0].

While for most mainland Japanese it's as simple as "It doesn't affect me personally, it's an advantage for the whole nation, why not?"

[0] https://apjjf.org/2018/03/Mitchell.html
Does this mean Taiwan is part of the US? China doesn’t seem to agree with this.
The DOJ publishes legal guidance on prosecuting computer crimes [1], which includes this relevant passage:

> An attacker need not directly send the required transmission to the victim computer in order to violate this statute. In one case, a defendant inserted malicious code into a software program he wrote to run on his employer's computer network. United States v. Sullivan, 40 Fed. Appx. 740 (4th Cir. 2002) (unpublished) [2]. After lying dormant for four months, the malicious code activated and downloaded certain other malicious code to several hundred employee handheld computers, making them unusable. Id. at 741. The court held that the defendant knowingly caused transmission of code in violation of the statute. Id. at 743.

The CFAA is notoriously broad, which is probably why Pfefferkorn didn’t feel the need to undertake a detailed analysis of exactly how it prohibits the deployment of a targeted exploit which would “undetectably alter previous reports, compromise the integrity of future reports (perhaps at random!), or exfiltrate data from the Cellebrite machine.”

[1] https://www.justice.gov/sites/default/files/criminal-ccips/l...

[2] https://www.anylaw.com/case/united-states-v-sullivan/fourth-...
What I'm about to say I've already said elsewhere in this post, but Audacity has been an incredibly loved and popular FOSS project for 22 years and it's done that without using telemetry.

It's hard for me to not be pessimistic and see the recent sale of Audacity and the introduction of telemetry as the beginning of the end.
Removing capacity from infrastructure is a solution that works when you want to discourage use of that infrastructure.

If that's not the case, I only know of one other solution: charge directly for usage. That way you can set the price such that demand stays at a high level, but at one supported by maximum available capacity.

If someone knows of a different solution, I'd like to know -- I have an induced demand problem in a type of infrastructure that I would like to operate at high capacity, and charging for it would be unconventional to the point of making it hard to find support for that solution.
I wonder if its feasible to identify the optimal (or at least a near-optimal) strategy if you treat it as a game of pure logic, where the players agree beforehand which attributes from a limited vocabulary apply to which words.
Cloudflare launches new security key-based replacement for CAPTCHA
Fascinating article, I wish they could publish some design examples. I would love to see some examples of clockwork mechanisms operating in a 500° C oven, a temperature where the blackbody radiation coming off the structure will almost* be visible to the human eye. Even just finding lubricants that can last in that environment without slowly degrading the metals they're there to protect is probably a struggle.

*the threshold is 524° C, it's close but not quite there
Mastodon is the Fediverse Twitter alternative.
Why don't you go check it out yourself?

https://en.wikipedia.org/wiki/Brain-to-body_mass_ratio

https://en.wikipedia.org/wiki/Encephalization_quotient
Snopes is a political hack and all information is biased.
> I called it in to Sunnyvale DPS, and they were totally unaware of it. There were two near-collisions in the 45 seconds I was within view.

Seems like if those confused drivers had merely stopped where they were, safety would have been improved!

Again, the question isn't whether or not automation technology can be confused by bad signage, we know it can. Nor is there a question that humans can be confused by the same situation. The question is, when faced with situations like this, we can trust the automation to operate safely.

And it seems like Waymo passed the test.

It's true the externalities are different for the different technologies though. If you put down bad cones currently, you raise the likelihood of an accident. If you mark your lane badly in the era of automated vehicles, you cause a traffic jam. I know which I'd prefer.
It's a bad idea:

1) people never answer those

2) they're bad at telling what's happening

3) this does not scale at all

Telemetry is an automated process and it's just the way to go.
Every time I hear someone complain about CSS I just know they've never used it in the IE6/7 days. Good lord, the amount of hacks, shims, fallbacks, polyfill, obscure stuff you had to do to make it work in IE6, IE7, and my absolute favourite(!) the IE7 compatibility mode which was like IE6 but not quite!

Ever since the wide adoption of stuff like flexbox and grid I haven't dared to complain about not getting stuff to work.
Agree to disagree, I like the subtle hills, forests, and big lakes, then again I like the mountains, the beach, marsh, or meadow. My post was definitely a bit dramatic but I'll lead it to remind me to not post on the internet so much. :)
What are stocks, shares and equities?
Audacity is very rough and buggy. Its popularity came from being free and featureful, not polish or focus.
Mahle unveils magnet-free electric motor with 95 percent efficiency
Exactly. There's a famous video out there from a few years back showing Tesla autopilot dutifully following a BMW at highway speeds. Then the BMW suddenly swerves around a stopped vehicle in front of it at the last minute, and the AP doesn't have time to recognize the object and come to a full stop, so it runs right into it. (The object is a fake baloon car, but the situation was real enough.)

Tesla has since improved recognition to prevent that situation, but the point remains: blindly following other vehicles is a common mistake. Remember all the "Do Not Follow" signs on construction vehicles?
I think we are into semantics here, but I would posit if your web server is talking directly to a db other than a key-value store for tokens or what have you, your system is architected poorly. Your web server should be talking to a service written in Java or C# or something that handles the db stuff.

edit: to address your point though, yeah, I think 99% of web sites don't need to be talking to a db.
That's different from web applications, of course, but most web sites aren't, and shouldn't be, web applications.
I actually have an easier time maintaining flow in cold environments. I keep my house pretty chill and warm the rest of my body with warm clothes. Summer in South Texas was miserable for me, so I moved father north and could not be happier with the change.

It's not that I don't still get tired, of course I do. More that I'm less affected by the ambient heat.
It's quite hilarious seeing a supposedly "skilled and intelligent hacker" (since we're on Hacker News after all) being so excited to recite the article.
That was in the 90’s tho https://en.m.wikipedia.org/wiki/Tactical_High_Energy_Laser

Technology has evolved and most importantly the threat factor has evolved. Hamas and Hezbollah can now cripple the Israeli economy by forcing the population to shelter in place and being able to hit essentially every corner of Israel.

When THEL was tested the threat was much more localized to the border towns of northern Israel and at the time the settlements in Gaza which in the overall scheme of things it was more of a nuisance than a strategic threat.

If Hamas’s capability to strike Israel remained static and was limited to circa 2004-2005 when the first rocket strikes began to appear even Iron Dome might not have been developed and deployed at the scale it has today.
Since I have a Job that runs every hour, I can see that it's been down for ~4hours.
Decades ago when I got a degree in anthropology, we learned about a Native American language that didn't share our concepts of space and time. I don't remember the details except they used the same tense for future and dreams, and distances were always expressed as travel time. (That might not sound all that significant but there was more to it.)

Also they tended not to use nouns. They wouldn't say "lightning flashed," just "flashed."

Seems like it was Mojave, not sure.
I was shellshocked when I was given my first Mac for work a few years ago and I couldn't find any way to get to the `/tmp` directory from Finder. I ended up making a symlink in my home folder and I still have no idea how else I was supposed to do it.

At first I felt very strongly about it, but then I just... stopped using it. Like, I stopped using Finder for everything. Here are some tips:

- Mac has an amazing CLI utility called "open" which is like a "xdg-open" that works better. Use that when you don't know what to specify what to open.

- The "Downloads" button on the dock is a quick way to run "open" on whatever you just downloaded.

- If you know you'll be opening several files over a workflow, just open the app first. For example, I will open Preview with the Cmd+Space shortcut and then Cmd+O to open a file system viewer.

- When opening files from the dialog box in apps, you can just type `/` and starting the path you want.

I'm sure I have a few others I would remember if I were on my Mac now, but the idea is yes, Finder is weirdly hard to use, but there are very few tasks where you actually have to open it.
That also biases data to a very narrow technical user.
Aha, that explains why the two spares that I ordered have been on back order.
Vaccinating Mosquitoes
Automated watering machine has what plants crave: Fertilizer
Not going to speak to whether it's coincidence or intentional, but PCI could also mean "Program Compatibility Interface" or something like that.
Maybe because the West cares about there not being another holocaust & yet another Sharia law country which disregards fundamental human rights for all.
Wi-Fi 6E Progress and Reality
Parts of it already are two channel. The parts which are single lane allow only transit in one direction at a time currently, so twining it will not solve the current problem.

It is also likely cheaper to widen than dig a while new canal. They will revise prices for wider ships to justify the expense of the widening project. There is not enough transit traffic to recover a full two lane system today.
Welcome to Vim Again
In the link you've shared:

"Although these countries generally support some form of two-state solution to the conflict, they take the position that their recognition of a Palestinian state is conditioned to direct negotiations between Israel and the PNA."

And I guess it's hard to negotiate with terrorists
Half a million lines of Go
Just because your armchair evopsych swings the other way doesn't make it any more valid.
The actual link instead of an AMP one (please stop using AMP)

https://www.nytimes.com/2021/04/08/technology/taiwan-drought...
Archive.is: https://archive.is/shK4D
https://archive.is/shK4D
The article quotes the part of the Signal blog that said “a real exploit payload would likely seek to undetectably alter previous reports, compromise the integrity of future reports (perhaps at random!), or exfiltrate data from the Cellebrite machine.” A complex exploit like that would say much more about the author’s intent than a driver that shuts down the computer when a “wiggler” is detected.
Not really. There's lots of other ways to learn about how your product is used, and without them telemetry will lead to some bad decisions. I've personally had to clean up the mess when telemetry driven decisions go sideways so many times:

* No one seems to use American express, so let's remove it from payment options. Turns out, the site had a bug that made sure 100% of AMEX transactions would fail. By fixing, we picked up 6% in sales, and lost a UX associate who was (and probably still is) arguing to drop AMEX because analytics.

* Since very few people actually click the apply button on the job board, let's remove the apply feature. The idea was we could send candidate profiles to employers based on views instead of apply clicks. Had to revert this one.

* Same company: let's take job posts out of our mobile job search app because most interactions end on a job post (and a click on the apply button). Best ticket the next day, "I can't find any jobs in this job search app?"

* No one uses the UI customizer (dashboard colors, fonts, and preferences). 100% of the tickets the next day were from people who were PISSED BEYOND BELIEF that we removed their favorite feater. Turns out the customizer basically was invisible to our app analytics. Had to revert this and re-do two sprints of work because the other new features wouldn't work with the customizer.

In 100% of the cases, talking to actual users would have been beyond wise before using analytics data to make decisions.
The word "Merkel" seems to act as a trigger for you. I can assume quite well where you are getting your political information.

Wondering how you evaluate the "track record" of the "extrovert" people I mentioned.
There is lots of evidence in a variety of contexts that humans are very bad at self reporting this kind of thing. You might get bug reports by soliciting feedback but you wouldn’t find out if people discovered a new feature or UI shortcut. How could they complain about a thing they didn’t know about?
I assume if the listing says "you will pay the buyer directly" there is zero protection?
You could generate an 128-bit installation ID and then send [date, hash(id, date)]. Now when you're debugging with a user you can ask for their ID and see which traffic is theirs.
Alternative solution: different zoning rules.

When I lived in a tiny Cambridge commuter village 30-minute cycle out from where I worked, the local grocery store was closer to me than one corner of Milton Tesco car park is from its opposite.

Here in Berlin? First place I stayed, out in the suburbs, the basics were a bit further — 300m for a bakery — but there were also seven supermarkets within 1 km.
Disclosure would be an interesting precedent.

"I have Signal installed on my phone" seems a reasonable disclosure of a known potential trap.

If a police officer chooses to scan said phone with Cellebrite, it feels reasonable that you have discharged your knowledge to the extent possible.
Yes, a similar thing used to happen to me just at this one particular bar in Chelsea. But it wasn't off by 19 years, it was off by just an hour, which is worse in a way. That made for some confusing drunken time warps until I figured out the pattern...
I keep having mixed feelings about web components...

Why can't we have templates, custom elements and scoped CSS without JS?
Would you believe any narrative involving Jesus ? Can somebody or something fools people with false claims about the messiah?
This is also how the original iPhone + iPod Touch got your location without any GPS hardware, so you could see your rough current location on the map after one of the early updates.
There’s already rapid innovation in this direction without government innovation being necessary. Ethereum is switching to proof-of-stake by the end of the year, and partially because of that is already 50% of the way to passing Bitcoin by market cap.
Making it easier to develop the software helps users, because then users get better software
> Each of these books is a custom element, or “web component”.

I always wondered about custom 'web components'. Is it safe to do something like this? -->

<style>

red{color:red}

</style>

<red>I should be red</red>

It works in latest Firefox. It feels weird being able to create arbitrary custom elements like that!
They use SPICE bombs https://www.rafael.co.il/spice-family/ From what i understand they are incredibly accurate. I think it is worth noting that from what i have heard, the IDF pays a higher price tag for this bomb instead of just dropping a cluster of 'dumb' bombs in order to minimize or negate entirely, civilian casualties. This is in addition to providing ample warning to evacuate the area in advance of an intended airstrike (for example "knocking" the building and dropping flyers). I'm unclear if other Western militaries take such steps and destroy their element of surprise.

[Given this, i am somewhat astonished at the reported casualties resulting from such strikes, but i have heard unsubstantiated reports that Hamas on occasion prevent civilians from fleeing the area.]
> a Native American language that didn't share our concepts of space and time

Is this actually true? From a quick look at Wikipedia, it doesn't seem to be.

https://en.wikipedia.org/wiki/Hopi_time_controversy
That's one benefit, for sure.

The main reason for this was to allow each class to have its own specific behavior (specially when evaluating), pushing some work into the parser instead of the runtime, since a SubList is a list of lists while a SimpleList is always a plain list itself, so no need for ".plain" methods in the last one. This makes things faster and the cognitive load is not affected so much (on the contrary, probably: I feel the syntax seems more familiar in the end).
The very existence of suburbs where the closest grocery is 10+ miles away is itself an example of DC-3s generalization.

Instead of cars making trips within cities faster, we started tolerating the same commute but spreading cities out more.
Free Open-Source IPTV/CCTV Media Service WebRTC/SRT
NYC Pride announces new policies to address police presence [pdf]
There are a fair amount of langages which interestingly break western assumptions about langage logic and reasoning.

A pretty famous example is Aboriginal Australian langages where directions are always absolute (cardinal), not relative. So in e.g. Guugu Yimithirr you'd tell a guest that the food is in the living room on the southern table, rather than e.g. the table to the left of the entrance, or the table in front of the balcony.

In at least some of these langages, time is also cardinal: where most western cultures order timelines left to right, Kuuk Thaayorre speakers do so east to west.

IIRC there are also cultures where time goes back to front (because you can see the past so it’s obviously in front of you).
You can use teddit.net or libredd.it to avoid them too.
When I started learning Chinese the grammar really made think hard about what I needed to say first. Then put it in the right grammar order, then translate the words, which is like a inverted 3D lookup table, sounds/tone/meaning. Memorizing the lookup table which people say is the hard part is actually the easy bit. It’s the restructuring of my thoughts to fit in the grammar. I find English I get you can get away with a lot of thinking while you talk..example; I would generally make up a sentence like this.. “hey why don’t we go for a run, somewhere next Monday maybe around noon, just the two of us. I think there’s a nice track close to my place.” I though of the activity first then the time then the person. Generally that’s how I come up with how to plan activities. In Chinese its subjects, time location, verb. I’m just beginning, but that has been the hardest part for my brain in particular.
GameStop FOMO inspires a new wave of crypto pump-and-dumps
The solution is to make suburbs more dense so that people are closer to the places they want to go. I suppose this would ultimately result in a “town” rather than a suburb, though.
Seems like that language would be incompatible with a modern society and would only really work for a primitive one.

As soon as you can have multiple things that flash or multiple modes of transportation your language would become too ambiguous.

That's not to say the native Americans that speak it couldn't evolve the language to accommodate modern society, I'm sure they could.
Is it immoral for utility companies to compute aggregate statistics about how much power/water/gas their customers are using?
I don't get it. Do marketing mails ever sell anything? Or changing the name of the company or any of those other transparent manipulations? It's insulting.

The product should wow the user and sell itself and then the user will come asking to pay for more features. I've bought many products this way.

There's no way I'm signing up for these things.
If there are a bunch of conditions under which Suezmax ships fit (calm days, above-average crew judgment, etc.) isn't that effectively support for Suezmax being more of a Suezbarely?