skysight-inc/HackerNews huggingface dataset:
There's actually research around this. I don't have references to any of the papers I read 10+ years ago, but the field is ripe with data since it's gotten easier to measure things.

One of the surprising results in this area, is that contrary to what was believed 20 years ago, dopamine levels rise prior to an anticipated reward. That is to say, we learn that some thing that our body "really wants" is coming and the brain gets flooded with dopamine before the thing is introduced into our body, or the event actually happens. So, like with sugary food, dopamine will peak before we've ingested it, possibly before we even even put the food in our mouth. This was a very unexpected discovery based on how we thought dopamine worked. This is why ritual can be so important for a lot of behaviors, the repeated actions create an anticipatory effect in the brain that allows for sort of a bigger positive feedback loop.

I wish I could find the paper it was a big enough deal, I thought it might be easy to google. Here's a paper from around the period I was thinking in any event if you are actually interested in how these things are measured. "Dopamine in motivational control: rewarding, aversive, and alerting" https://www.ncbi.nlm.nih.gov/pmc/articles/PMC3032992/ That will lead you to over 266 referenced papers, and I'm sure the ability to measure has only gotten better in the last 10 years. I will warn you though, this is a total rabbit hole. I used to casually study neurobiology, and it's an amazingly fascinating topic.
Oh! The Professor and the Madman by Simon Winchester
Take a look at F#. It's a superior language and doesn't add new features like C# does (which is mainly stealing from F# anyway). Also, Elixir is a language that is very stable from release to release.
https://www.poetryloverspage.com/poets/kipling/dane_geld.htm...

https://en.wikipedia.org/wiki/Danegeld
Yes. Let's see how much cruft Rust has in 10-15 years as usage accelerates?

For example Rust's GPU support is not great right now - and it may very well feel bolted on a few years down the line.
I think we should actually legalize ransomware. By that I mean create a government-ran national bug bounty program. All companies of a certain size are automatically included in it. Bounties are awarded based off severity, and bounties are paid for by fines to the companies hit.
If they actually have proper backups to avoid paying the first one, my guess is they are much more likely to also have the skills to prevent a second breach.
Please for the love of all things marketing stop using acronyms on your homepage..

I literally still cant figure out what you do.
The motivations may be different, but how they convey their message is very similar. Advertisements, documentaries, and even propaganda, manipulate our emotions and subconscious thoughts using the exact same techniques as film and television. All of these can be used to subtly influence public perception and opinions.
So the problem is that unkempt looking people have created code that this person has to deal with??

Oh, and every single person who has hair on their neck looks unkempt, without exception, am I hearing that right?

Sure, OK.
It is already illegal in the US as of late 2020. But we know nothing really happens when corporations break the law.

https://cisomag.eccouncil.org/paying-ransom-is-now-illegal-u...
“Never negotiate with terrorists” is a simple and clear mantra, and as most clear and simple concepts it hides a lot of assumptions.

One of them is you are ready to lose the hostage in the worst case scenario. That’s how the police sees it, because the society benefits more from being firm in individual cases than losing a few of its members that might not come back anyway.

That’s a hard one to swallow, hard enough that govs also sometimes can’t follow the mantra and just pay the ransom.

It’s crazy hard to get people to sacrifice themselves for the better good, it’s yet a bigger ask for corporations who already screw the public day in day out.
Of course it's not necessary. That doesn't mean it isn't worthwhile.

> I'm probably just a grumpy C/C++ programmer

Yes! I always find it weird that technologists can be some of the most conservative luddites there are. I guess it is just human nature.
The FIRST thing that popped into my head reading that headline: "HEY MACARENA!" (Yeah... I'm getting older.)

And the reason that song is because years ago people wrote in to NPR to complain about a song they played at the end of an hour's news segment that "got stuck in people's heads all day" so they played a clip of it just to let listeners who didn't hear that segment know what the reference was. And to then apologize for re-sticking that song in people's brains they closed out the hour with "Macarena." I've never laughed harder at anything from NPR!
>Which is why 50% of lower level engineers in Amazon are Indians and around 70% are asians.

I don't understand this.
This certainly is a case of those people being vetoed. The issues with yokes are well known and even many customers would have complained
Although I think false advertising would be the least of their worries if they decided to do it.
Judging by his profile picture it's the Marvel version.

https://pbs.twimg.com/profile_images/1337356777113985024/e-a...
Meh, not really. Some of the biggest benefits from slonik are only possible because of Javascript's support for tagged template literals [1], e.g. you write a statement like

sql`SELECT id FROM foo WHERE bar = ${barValue}`

Tagged template literals make it feel like you're just doing string concatenation, but it's done in such a way where under the covers it's actually creating prepared statements, and it is literally impossible to have SQL injection bugs unless you deliberately go out of your way to make them.

1. https://developer.mozilla.org/en-US/docs/Web/JavaScript/Refe...
The comic book is not owned by disney. Its a Neil Gaiman version of Loki from American Gods.
Infinitely less important than having customers.

In general, it is more likely to be playing house than doing what needs to be done.
Once the criminals start maintaining their own backups of victims data and helping them restore from rival attacks, they can successfully call themselves a mob.

Somehow, that's a quite believable scenario.
If it's fetching ads, it has to 100% be sending some data to someone, who is likely able to correlate it and track you. It doesn't take much.
They collect biometric data now, faceprints and voiceprints. [0]

[0] https://techcrunch.com/2021/06/03/tiktok-just-gave-itself-pe...
There isn't really a "default" GUI library at this point. WinForms and WPF are both rather equal in support. (Arguably WPF gets far more updates than WinForms, most months.)

MAUI (in .NET 6+) will be a first party library for some types of cross-platform desktop apps.
ISTM we only hear about the tiny minority of "victims" who do "suffer consequences". Most organizations who get ransomed just shut off a bunch of unnecessary stuff, re-provision the necessary stuff with passwords turned off, restore from backup, and hire some security consultants.
This type of thing is why I like shows like https://unfilter.show/ that not only are "independent" but also provide some meta-commentary on the production of the news stories themselves, rather than just using the headline to jump off onto whatever rant they feel like.
What is "it" that would bash into your leg? The door? Are your toddlers strong enough to ram closed door with enough force for it to bash into your leg?
That is a justification I hear for working in defense or on US gov contracts.
One of the reasons why I like the story of Final Fantasy XV, as fragmented as it is, is because Noctis is a messiah in the same way Jesus was: a king of royal lineage, prophesied to save the world by sacrificing himself. Yet Noctis, unlike Jesus, is a flawed person who starts the game concerned with little but himself and maybe his friends. The arc of the game shows his struggles and sacrifices, all of which culminate in him earning his worthiness to save the world. That makes it an interesting messiah story, imho.

On the other hand, if you go onto the dark side of YouTube, there's a guy named Professor Geek. His traditionalist views on mythological heroes and opposition to the injection of current-year politics into modern mythological media like comic books automatically make him a mouthpiece of the alt-right and anything he says is not to be trusted. But should you trust some of the things he says, there are interesting perspectives in his videos on the two major types of hero: the aspirational hero, a character representing an ideal to be striven for; and the cathartic-motivational hero, a flawed character who is struggling to approach the ideal. Think Superman and Batman.

Jesus is clearly supposed to be an aspirational hero. His story is not supposed to be that of a flawed person struggling to be better. He is a template to show what a good person looks like: become more like Jesus, and you will be better. The Christian answer to the cathartic-motivational hero is Saul of Tarsus. Maybe some of the Apostles also count.

So even though I personally find Jesus boring (and this was a factor in me renouncing my Christian faith), the Jesus narrative does serve a mythological function.
In France a sabbatical is part of the Labour Law, you get back to your position or an equivalent one. This helps to make the step.
And also due to the attacks being cheap to run
I think the analogy is apt since both paying terrorists and ransomers is counterproductive.

If you pay the terrorists they just do it again. If you pay the ransomers they just do it again. And the payment increases their capabilities.

I think, except for rare conditions where a temporary need exists, it’s a net negative to pay.

But I think the security flaws that allow random ware typically are a sign of institutional incompetence so it makes sense they would also be incompetent to pay, and pay again, and pay again. Rather than to prevent the attack or to correct the flaw that allowed the attack.
You might be right I've read the article as "Rust Is Not a Company" and how the organization structure of Rust differs from that of a company because the problems are different. So my point was that the problems are the same in startups.
TSMC to Start Risk Production Using 4nm Node in Q3
Yeah you pulled that out of your ass
Good question, we've answered a couple times in this thread already, so please forgive the copypasta:

You are correct, for this smart contract to work you need defined rules around how the money is released should either party falsely claim success or failure, so you need to rely on automation or some third party to validate fulfillment of the contract. So you're back to an oracle problem, how do I know I can trust the validator?

The nice advancement here is that anyone can be that third party! Your smart contract can explicitly identify a third party for multisig, or you can rely on a validator pool of mechanical turks instead of a licensed escrow agent, and accordingly the cost of escrow can decrease.

The nice part is that this is customizable, and built into the very rails that move money. It's a much lower barrier to entry than trying to build something like that for ACH, and that's what excites us about cryptocurrency.
There's a bunch of tools that trip me up between the BSD and GNU versions.

Find is the big one - so much so that i "cargo install fd-find" on my boxes these days and use the rust version across all hosts.

I briefly flirted with using zsh's enhanced glob abilities, e.g.

find . -type f -size +1m -ls

vs.

ls **/*(.Lm+1)
This reminded me, there is more recent discussion than I was previously aware for the etymology of kobieta (Polish word for woman), an outlier in Slavic for a word that naively seems would be ancient.

https://forum.wordreference.com/threads/all-slavic-kobieta-w...
Yes, I agree with this amendment.
"Brave's approach to funding is at odds with privacy."

Elaborate, please. Brave's ad model is built for privacy and security. User's must first opt-in. Your data remains on your device. Ad catalogs are downloaded and reviewed locally. You are rewarded when you see an ad notification. I repeat, rewards are granted when your attention has been spent; no clicks necessary. I discussed the model further in this recent 5-minute video: https://youtu.be/LsrrT502luI
I guess I am not understanding something still about this spoof protection.

What prevents me, an attacker, from making (or simulating) a bunch of hardware with different identities? Perhaps by setting up my hardware to run through multiple different 'self' identities and then trying to talk to other hardware with each disguise.

If the address space is small and cheap, it seems that I could quickly map any decentralized hardware at low cost.
> We already established that they don't say that.

We haven't, you didn't.

> when you cannot hit the army

They do but it's just easier to just cut a fence and stab children sleeping, that's not legitimate struggle that's barbarism and terrorisms.

> willing to use any means

That's exactly the point, when the end justify the means. What they do, how they operate that's evil. It has nothing to do with justice.

> your country had been invaded

The PLO was founded in 64 way before any occupation of the west bank and gaza so your point of fighting your oppressor is moot unless you consider the occupation the entire state of Israel then your legal argument is void.

They didn't struggle against their Egyptian and Jordanian "occupation" but when it's Jews, oy vey.
I was recruited as a junior executive into a large media corp earlier in my career, and I will never forget my manager's closing "sales pitch" at a bar in midtown Manhattan: "Join us and become part of the group that shapes global culture. Where else are you going to go where you can have this kind of impact on society?"

It's an open question whether art influences society or vice versa, but I can tell you from firsthand experience that executives in show business have no doubt it's the former, and they revel in that power. It wasn't for me, I quit after a year.
I wouldn't blame VLC. Here's the response from main VLC developer:

https://news.ycombinator.com/item?id=7205875

I agree with them that when using the official API for whatever-X, you can't be blamed when X fails. Whatever X is, it should be built to cover all uses of its official interface.

In the case of VLC, that X is the Dell sound hardware, which can't handle certain uses because of a power incompatibility between the Dell sound card and the Dell speakers.

Reminds me of a case long ago where a GUI program took blame because it sometimes caused the X11 server to crash. That was clearly a bug on the X11 server side, too. A server should be built such that it's impossible for a client to crash it.
I thought that was pretty fucked up as well. My kids are completely free range. When I was 5ish in Poland, I was going to buy bread from a stand about 1.5m away as my daily morning chore. Nobody batted an eye. I loved it, and my mom got her annoying son out of the house for 35 minutes a day: a win-win! Not sure why we infantilize kids in the US.
It looks like our landing page ran into a caching issue, but the prices at https://live.hedgehog.app are up to date.

We're pushing a fix ASAP!
I recall folks vigorously questioning the thinking behind the large center screen subsuming many physical gauges and buttons in the Model 3. It was visually unusual and rather odd looking. Speculations included safety concerns about visual focus being shifted more often or more potential distractions navigating screens to adjust temperature, change music or pass gas.

In the end, the 3 and Y are gaining market share quickly, and those concerns did not spell the demise of the vehicle.

This seems like a similar design choice, different in more ways than just visual impact. I expect there will be the same two camps: Those who own the car and say it's easy to get used to, and, those who don't own the car and can't imagine why anyone would choose a yoke.

In my view, ok, it's different, but I'm going to withhold judgement until I've put a few hundred miles on one.

BTW, I am sure that part of Tesla's thinking is going to be that they expect humans to steer the car much less over the coming decade. Their goal has been to make the steering wheel superfluous for quite some time.
That seems likely. Maybe Disney shipped them the list and maybe they didn't. And presumably Disney could own copyright (trademark?) to some elements of the Loki and Thor characters as represented in the MCU. They just obviously can't own the name, as they can with many other characters.
Didn't they make a similar theatre about drinking coffee (Simon, if memory serves well, the blond brother).

Disclaimer: I watched it back the day, procastrinating was made easier during afternoon instead of home work. Also, Jessica Biel.
Here[1] is the ongoing list of "curl security problems." Note the several memory safety related issues. The two most recent are:

May 26, 2021 CWE-416: Use After Free
May 26, 2021 CWE-457: Use of Uninitialized Variable

There are numerous others that follow including out-of-bounds reads, overflows, etc. I can't imagine where you got the idea that this somehow "hasn't ever really been" a problem for curl.

[1] https://curl.se/docs/security.html
This also happens nationally, and on the web. Today one paraphrase is "Rumors are swirling about Dong Jingwei (董經緯)".
> gawk it has a higher priority in alternatives and flips the awk symlinks over to gawk automagically

That must be what happened. I just checked my other machine that had a pretty new install of 20.04 on it, and it does have mawk. I'm happy to see I'm not crazy.
Following https://snikket.org/service/quickstart will get you a self-hosted XMPP running in minutes, with all modern messaging features you'd expect to be working out of the box.

On iOS it works with Siskin, Monal and ChatSecure, but you're right that there are some rough edges on that platform. We're working on polishing off those edges for a Snikket iOS client (based on Siskin).

Android is working well, and the plan is to work on a web client after iOS is released. In the meantime, https://conversejs.org/ or another generic XMPP web client can be used to log into a Snikket server.
Can't speak for all dbs, but many use a clustered index on the primary key. In this case, the physical rows are stored in the order of the index, rather than just pointers to the rows.

If you are inserting non-sequential data into a clustered index, every insert results in a non-trivial rearrangement of the rows. UUIDs are not sequential, so at scale you will experience performance issues if you are using UUID primary keys and the PK index is clustered.

You won't notice this until significant scale, however. You can still use a unique identifier alongside an incrementing primary key, and you could choose to use a more compact format than the UUID. 8 base32 characters have over a trillion combinations, and are nowhere near as unsightly in a URL.
Interesting idea. But what you're describing is absolutely not "ransomware."
Hey at least it's not Rust vs Go anymore
How exactly is Brave a scam? The author certainly couldn't argue this point (detailed response to their claims can be found here: https://news.ycombinator.com/item?id=27552530).
Why would you expect otherwise?
Huh? I’m not saying there should be a law. I’m just saying I think it would be more effective and persuasive if it was more dispassionate. It’s my personal opinion.
Take customers from Grubhub or Uber Eats back to your own orders website!
My small project. Will gastronomy be interested? :)
> But if I'm not mistaken, if doesn't generate types for result days from the queries, unlike pgtyped?

You are correct. But note that pgtyped is really only able to generate types because it actually needs to run your queries against a running instance of your DB. Some contributors have commented they are working on something similar for Slonik, https://github.com/gajus/slonik/pull/267#issuecomment-840559...
I think Baldr is supposed to serve as the role model in these stories (and is arguably inspired by Jesus). And that is sort of why Loki is such a villain, since he conspired to have Baldr killed.
The Hackers News is an extremely conservative place ;-)
I think there is nothing to prove, I set up my prosody just by reading the documentation -- eventually https://compliance.conversations.im/ is a great tool to see how well you are doing, and which modules are worth uncommenting lines from the initial config file. I have a functional and working server with just a score of 85%.

The only real pain point could be iOS, but it is the platform the one that makes things extra difficult, see for example what happens with browsers (https://en.wikipedia.org/wiki/Firefox_for_iOS)
As someone who's literally never written a single line of Rust and has shipped lots of C and C++, this is a nonsense argument. So what if C++'s model has "worked" for 36 years? It survives through momentum, it really doesn't matter how well the model works because it's hard to replace. Same with C. There are virtues to both languages and their standards processes, but big players wouldn't be pushing towards adopting Rust if the C and C++ models actually were up to the needs and standards of software in 2021.

C++'s standards process and pace haven't stopped the stdlib from being filled with bad implementations of primitives that people have to replace with libraries like Boost or custom per-vendor implementations - why do you think so many companies (game studios, facebook, etc) ship their own versions of the C++ STL, or prohibit the use of the STL entirely? Why do so many libraries ship with a C++ wrapper over a C public interface instead of the opposite? Why do binary-only libraries written in C++ so often ship with unique builds for various compilers instead of a single binary like a C library? The main answer to all of these questions is that C++ is deficient by design in all sorts of ways - underspecified ABI, low-quality stdlib specs, bad encapsulation, bad performance characteristics, etc.
If you could have paid someone to do it, it is labor.
But if we retire our anachronisms —- steam, sail, animal husbandry, farming —- what metaphors will English have left?
Does it really surprise anyone that criminals would (re)target a place that paid out quickly and made their "jobs" easier? The aim is to get paid as quickly as possible with the least complexity and move on to the next target, is it not? If you're a freelancer and you have 10 clients and 8 always pay within 14 days of invoice and the other 2 let it drag on 90+ days and having to send out "reminder" letters, who do you favor doing business with?
One of my favorite engineering quotes: "the ocean designs boats."

Circular steering wheels are popular for the same reason rockets are long and tall or boats are shaped like... boats.
According to a study by Cybereason, which sells endpoint protection software.
Immagine this thing autoparking. A round wheel spinning has no edges to bump or catch on things. This yoke makes hard to judge whether your knees are enough away from it.
Here's what Robert Zubrin has to say about this graph in his latest book "The case for space" (p174):

"The national fusion programs progressed well during the Cold War because of fierce international competition. They have stopped moving forward in the late 1980s because the decision to consolidate them all into a single global project, the International Thermonuclear Experimental Reactor (ITER), removed all stimulus for action. Indeed, it too, nearly a quarter century for the bureaucrats in charge of ITER to manage to reach a consensus in 2010 on where tu put it, and it will be another quarter century before the machine even attempts to reach thermonuclear ignition in 2035"
If a topic is split across multiple partitions and we have multiple consumers, won't messages be read out of order?