skysight-inc/HackerNews huggingface dataset:
In a number of ways I'd argue that FV of an average CRUD app is a very hard problem, for two reasons:

- the requirements generally change quite frequently

- the requirements are generally a long way from being "formally verifiable"

Where I, personally, have found the most value so far using FV techniques is from modelling "tricky" things whose requirements are quite solid. A few examples from my work:

- A state machine for managing LoRa communication. The requirements in the LoRa spec are pretty good. I took those requirements and designed a state machine I could implement on a low-power device and modelled that SM in TLA+ to verify that there were no deadlocks/attempted transitions to invalid states.

- A state machine for managing the Bluetooth communication between an Android app, a Bluetooth-Iridium (satellite) bridge, and the server on the other side of the Iridium link. Similar to the LoRa case, I used TLA+ to ensure that there were no deadlocks in my proposed SM (and uhh made a number of corrections as I went). Ultimately, due to the design of the BT/Iridium gateway, the exercise resulted in the conclusion that it wasn't actually possible for this process to be 100% reliable but it was possible to detect and retry the edge cases.

- Modelling a somewhat awkward email/SMS invite flow for a mobile app. You could get an invitation over email or SMS, and your account transitioned through a few different states as both your email address and your phone number were verified. Modelling this helped ensure that your account couldn't get into a state where no forward progress was possible or into a state where you could use a half-completed account.
I have been on 5 military deployments to the Middle East of which 4 of those have occurred during my corporate software career.

I used my free time to write personal software. My second deployment gave me the opportunity to build the skills to move from a junior to a senior developer almost instantly. Otherwise, this extra practice has made me a stronger and more confident developer. Such confidence and portability has put me completely out of alignment with norms of corporate software developer practices which has made me a less attractive hire.

Now I am bored with life after watching people continuously fail in software in the same ways over and over again. After years of experience I have learned to just step back let those predictable failures happen, because the only thing worse is a solution that challenges people assumptions.

The only analogy I can think of is having a dumbass teenage child. You tell them not to do something stupid, they do it anyways, and then there are consequences. Then when you try to help they yell at you because their fragile ego is bruised, so you step back and let them fail but when they bitch at you about it you go do something else.
Are you on Android or iOS? The iOS app is really well done IMO.
I seriously doubt marketing and advertising departments will care about standards, if they would even notice. The industry can't even manage with web standards, imagine trying to get scummy tracking companies to comply.

IMO it's not even an imperfect solution. I'd say performative, and past DNT efforts have failed, so why are trying this again?

Maybe a tool that lets one easily report software for GDPR violations? That would have more teeth.
Yes, we do keep the versions of the software but if there are changes in the database layer (eg collection schema or validations, etc), then there is no point in restoring to the older version as it will bring inconsistency in the platform.

For all the UI changes, you can have as many versions as you want and can always revert back to any older version.

On-site deployment can happen only when you are able to extract the code and host it on the clients machine/cloud. The price point we are looking at ($25-$200 per month) will not make it us a viable option to manage the third party infra.
Hence thinking to build it in a way so that the user can take the code and host it themselves, but then they cannot import it back in the builder/our platform.
It was just added last week

https://bitwarden.com/blog/post/admin-password-reset-is-out/
The ability to refactor large code bases quickly without introducing segmentation faults, memory bugs, UB, etc.
Maybe also https://www.youtube.com/watch?v=1c1F0PpbHdg
A better idea would be to centralize all the "do not track" mechanisms in a single repo and shell script to be sourced.

That way you don't rely on the counter-party willingness to check for your flag.
Gwern has a list of similar stories: https://www.gwern.net/Tanks#alternative-examples
> Despite that, I believe Canada will be a major recipient of these climate refugees when places just get too hot to live in.

In what sense would these people be climate refugees rather than infrastructure refugees? What percentage of Canada's population can survive in Canada without canada's infrastructure ?

If you read the article, a major problem the author is complaining about is the infrastructure:

> The electricity problems make it worse. The load-shedding comes during summer months and, these days, often falls in Ramadan, when people can’t drink water.
> try learning other languages

Subtitles are fine. Learning a language well enough to watch and enjoy a movie and get subtle jokes/plots is no easy feat.
Many podcasts have transcripts, show notes.

I just checked. This publisher charges for those. An interesting monetization strategy.
On the other hand C is simple language, there are no discussions about how to do something in C between people who know C.

C is tedious but kernel programming isn't about spewing vast amount of code anyway. It is more important to be able to read it, understand it and ascertain it is correct. This is one of main reasons for why C++ is not there.
What? You want to single out developers and public shame them? Yeah, that would totally work out. /s
a lightbulb moment for the author, in which he happens upon the idea that films made for mass appeal are somehow limited in artistic scope & ambition.
> so long as their boss tells them to

What do you mean? The closed PRs are all for free and open source software. You seem to misunderstand their intentions and have a lot of entitlement.
This post reads like the author has a midlife crisis. If you want something new and unique, I dare you to try Grave of the Fireflies.
In the '90's I worked with a bunch of ham operators in a building next to Route 95. Perhaps the most interesting call that we heard was a guy who kept switching between his wife and his girlfriend. IIRC (it was many years ago) neither one was happy with him.
Technically, self-adhesive LED strips are PCBs distributed on reels of tape.
Names please / citation needed.
Mubi is also excellent
> "Threats of death have no place in convincing someone."

What I still don't understand is how we got to the point where it's not considered straight up illegal (like it used to be at one time in the not so distant past).

As recently as my own childhood (mere single-digit decades ago) vocalizing a death threat aloud with any sort of seriousness could get you in a mess of trouble with the law, and putting it in print could get you a night in jail to think about it at the very least.
> Again, if you have no interest in the idea that some things are correct and others are incorrect, this will not appeal to you. But that is a postmodern relativistic position and not one that everyone agrees with.

Sorry, but you're just wrong. Everyone agrees grammar and correctness is important. AAVE has and enforces both. This has nothing to do with postmodern relativism.

I bet you can't translate or understand the difference between these sentences

We working
We be working
We stay working
We steady working

eg, most people think AAVE "we be working" means "we are working". But it doesn't, and if you use or understand it that way, you're not being correct or grammatical.

Would it kill you to familiarize yourself with what's correct and incorrect in, and the grammar of, AAVE?
Andrew Ng on Data-Centric AI and Building Modern Data Team
Ivermectin to prevent hospitalizations in patients with Covid-19: random-d-blind
Factually incorrect: only a small minority of talented people went working for KGB. It had many perks but wasn't a place where a serious talent would thrive.
>> Eventually it will turn out that it's not easy to avoid mistakes in that language as well, so we put another layer on top, and again and again.

That is a risk: if the specification is the entire program written in the specification language, then the same opportunities to make mistakes present themselves when writing the specification, as when writing the program by hand.

In this case though the specification language has the advantage of being purely declarative: it's only a statement of pre- and post-conditions without any assumptions about implementation. Such a specification leaves little room for mistakes.
Ivermectin to prevent hospitalizations in patients with COVID-19 a randomized, double-blind, placebo-controlled trial
Some app developers are going to be better at respecting privacy than Google, while some are going to be worse. The problem arises when you have to assess each one: people either won't or run the risk of relying upon misinformation.
Whoa, Symbian's C++ was quite different to the C++ most people understand. 2-phase construction, no exceptions (Leaves and Traps), no string type (Descriptors).

It was quite difficult to write, and new hires had to essentially be retrained. Expecting an app ecosystem to be built on Symbian C++ was unrealistic. It's the lack of an ecosystem that killed it really.
I was under the impression that SeL4 exists.
I never said the world would end. I just answered the question about repurposing the hardware.
How to design APIs for your business
I value privacy but version numbers seems like an odd place to make that stand since it’s one of the least unique bits of information, especially in this century where automatic updates are increasingly the norm.
That's what we call a 'joke'
“ Every couple of days I curl up on the couch at 10pm, scroll through Amazon Prime video, and pick something to see. It’s almost always a disappointment.”

Had you done this two decades ago using the equivalent (blockbuster), you probably would have felt the same. What I do think is manifestly different now is that we don’t have nearly as accessible good film criticism. It still exists, but it’s mixed in with a bunch of internet dross. Filtering mechanisms have always been essential to life online and our current ones massively favor eyeballs over quality.
> 1. rust is easier to read than c/c++

Rust may or may not be easier to read than C++, depends on your experience.

But it is not true it is easier to read than C. C is objectively much smaller, simpler language than Rust.

> 4. In my own experience I have found rust to be simpler to Deal with correctness than c/c++

That is the whole point of Rust. And also to do this with minimum runtime overhead.
I don't actually know! But there are a lot of factors. One is the movement of the robots, another is their construction and the supporting structure, as well as all the electronics involved. Making electronics is very resource-intensive.

I often wonder about how to make these kinds of comparisons, but it always involves so many guesstimates that it quickly falls apart.
I think that the MPLv2 covers the best of both worlds. It is a lightweight copyleft that requires you to give back the modifications you do to the original codebase, but it doesn't prevent you from static linking or mixing code with other licenses.
I don’t worry about AÍ taking our jobs, I worry about Asia becoming the dominant force in silicon design and manufacturing. Imagine trying to decipher a translated Chinese data sheet...
I'm glad it's out there, though I never cared for the interface (OSS has done a lot better on interface). When on another platform, I had the pick of a half-dozen others that did what it does better.
That's very nice but what I always want to see in program synthesis work is a proof of soundness and completeness: does the synthesiser provabl produce only correct programs; and can it produce every correct program?

The abstract of the (POPL) paper claims that "the derived programs are ... correct by construction" but what about the transformations to the specification, particularly the post-conditions? That's a bit scary. When and how can post-conditions change?
The Government and its allies have a simple majority in the Rajya Sabha.
1 million 8TB hard drives. you can probably put at least 100 of them in the single rack, which means 10.000 racks, put in 100x100 grid that means a single 300mx300m factory hall. Treat that as an upper bound, probably it is possible to package the drives more tightly.
Lets take your 10 years one...

If a work loses its copyright after 10 years, I could grab emacs 23.3 and make some changes and release it all close source. Or gcc 4.6.1. iText became AGPL in '09.. version 5.1.1 was released 10 years ago (5.5.13 is current) and it could be brought to a closed source library.

Whats more, I believe that the photographs that I took 10 years ago still have as much value as the day that I took them. There are a lot of photographers who's livelihood is based on their library of photographs that they have taken over the years.

---

Lifetime plus 70 was done in the era where publishing content had a very long tail and the estate (and children) were able to collect from that long tail for their lifetime too.

While I'm in agreement that lifetime + 70 is too much, I believe that 10 is far too little.

--

A prediction / alternate world -- if copyright was 10 years on software, you'd get an EaaS model - everything as a service. You wouldn't have anything that you could install. No libraries - nothing. You make calls out to services to do whatever you need. This would likely include connecting to VMs controlled by large companies from rather low powered terminals. Yes, this looks a lot like chrome books and the cloud for everything.
There are a lot of people on HN that are just stuck in this industry because it pays correctly but are doing things that are far from what they expected when they started. Please don't exclude them for no reason.
Interstates go a lots of places, airports is just one. they also cross Nebraska for example.
>"I think any decent developer would be put off by C to some extent."

Call me indecent. I use C for firmware development running on small microcontrollers and consider it perfect for this particular task. Not put off by C for this task at all.
Thanks for your feedback.

What if the startup says that in case if it fails or shut down, it will make the source code public?
Even in that case, it will be quite tedious and challenging to host the application due to its complexity.

Will you be willing to spend some bucks (like 6/12 months subscription fee in exchange of the code?) so that there is no forced-commitment/attachment with the platform and you can host it yourself as and when needed.

We are planning to charge around $25 - $250 per month, depending on the traffic volume. All features will be available in all the plans.
Those who don't do politics get done by politics.

What you found are orgs with win-win (nonzero) cultures, where everyone's incentives were better aligned.

Identifying those safe harbors is a great skill.
Java upload file flaw using Spring Boot
Yes, it's very cool! But don't use it to transmit in practice though. The output is very dirty because it produces square waves which generate a lot of harmonics (emissions on unintended frequencies).

You can use this safely if you know what you're doing but only with a lot of filtering. Or by not transmitting as such but outputting into a receiver directly with some attenuation.
Twitter restricts account of expert who mocked China leader
Wow, I'm impressed that alloc crate modifications are already there ! Seeing this rate of progress (and the funding behind this work) makes me quite optimistic !
Yup, and notice that the autonomous voyage was "interrupted by a small mechanical problem" and "no one on board to repair".

It doesn't take much to shut down mechanical devices.

The problem with the "machine screws that never snap" is that we are still dealing with physical materials - everything is a trade-off; we could spec a screw with 100x the strength of the max expected load instead of a standard 2.4x margin, but we've probably blown both the weight and dollar budgets, and/or merely shifted the failure point to another component. And this doesn't even count for disasters to the mission from unexpected events.

Seems that we'll need to get well into the realm of self-repair and self-replicating devices before such massive remote autonomous are reasonably feasible.
I'm so exhausted and demoralised by this endless cascade of things-getting-worse. It's taking a really big toll on my mental health and there's no resources available in my country to offer support (and there's nothing to be done except try to learn to live with it, anyways). The future looks bleak.
Not really. It is a tradeoff but you can't really compare their efficiency because they don't provide the same features. Credit cards provide none of the properties provided by cryptocurrencies.

You're looking at the cost of transactions. You're not looking at the cost of private anonymous trustless decentralized uncensorable unsanctionable irreversible transactions.

I think bitcoin is a waste of resources because it failed as a cryptocurrency. I wouldn't mind even larger amounts of resources being poured into better coins like XMR though. I don't care how much energy it requires, those properties are just too valuable.
KGB was renamed and split into four agencies (FSB, SVR, FAPSI and FSK) that were later merged down back to FSB and SVR. There are still KGB people working there that didn't even have to move their offices.

The country is now ran by a clique of ex-KGB hardliners but I guess that does not count because it was renamed in 1991.
Interesting points but it's hard to say for certain without knowing what the individual license terms are. Games continue to sell long after release, and many were released close to the open sourcing dates. Would Id have lost out on long-tail income if the devs could have switched to (eg) MIT terms?

And with a MIT IdTech2 engine, would any of their IdTech3 customers layered on their own improvements to the older engine? It's not like an engine is an drop-in solution. You still have to work it, and IdTech3 is after all just Id's improvements. Somebody could have taken the earlier engineering and run with it, just as open source efforts did, but into their own closed-source product.

WRT competition, I don't disagree on the point about the game's not being solely about the engine, but the era of gaming we're talking about did very much rely on novel technology. I think changes like those done by Infinity Ward may have changed the engine marketplace pretty disruptively in the early 2000s' flood of WW2 games, if they'd had to release them. GPL protected Id's take (CoD has an extremely long tail), as well as letting IW keep all their changes theirs.
If you think robots consume much energy and are bad for the environment, try switching them out for humans and see how much energy you need to keep them running.
> i think any decentralised network will eventually skew towards increased centralisation. something we see already in the centralisation of mining and/or network validators.

This is not exactly a decentralized network, more like federated, with large servers and many more users. Have a look at I2P for a truly decentralized design.
Fighting the FOMO of missing out on great content? Watch this
Beyond helps you save, organize and focus on amazing content, while expanding your knowledge on your favorite topics.
Pointing out that the garbage dump also has a nice re-use station and a recycling sorter doesn't make the parts of it on fire emit fewer noxious fumes.
Not saying that any of the competition has it, but last time I tried Office online I couldn't edit styles. Have they fixed that yet? I would consider styles to be fairly fundamental to the Word experience
Because it would be easy to show if there was a counterexample.
As you can tell by the number of comments you got, it's not a very popular practice nowadays.

Invest your time wisely.
I'm not trying to put everyone on the same level as your situation, but many (most, I might guess?) have had parental situations that are less than good. Sometimes for a short period, sometimes for the entire childhood.

My childhood wasn't bad (as in horrific) but there were enough ... episodes that stuck with me for a long time, and sharing with friends (both at the time and afterwards) raised a lot of eyebrows (mostly saying "that's really not normal/acceptable").

"This has allowed me to come to terms with his actions enough to forgive and forget (for the most part) and move forward with my life."

I'm glad you got there. I've come to a similar place (without a lot of therapy, but over a longer period of time). My parents did the best they could, and on looking back, they were in a situation they didn't want to be in (kids at a young age, money problems, etc). With enough time and distance, and knowing them as an adult, they're generally OK people. They did the best they could, they just didn't know very much at the time, and ... they got a lot of bad advice (imo) during a pre-internet time when it wasn't fast/easy to get a lot of information. I'm still rather fortunate, in that they're both overall good people (just... were not prepared for parenthood) - many folks are bad at parenting and ... are just overall not great people either. I have a sibling that is still struggling to come to terms with some of this, and is still searching for 'answers' to things that I don't really think have 'answers'.

And yes, a good spouse can really help balance you out, give you some grounding and perspective. You can get some of that through therapy as well, I'm sure, but having a spouse with you is a different sort of grounding and perspective.
Thanks for the informative answer!

Just a note, I (personally) don’t consider TLA+ a FV technique — it is a really good technique that actually scales much better than formal verification programs like Agda or Coq.
How do you trust Little Snitch?
Streaming services are the bottom of the barrel, they greenlight everything and every metric they use to suggest or reveal “whats good” is a lie that diverges from a century of what people expect. Well funded studios diverging from what established Hollywood was greenlighting is interesting but the potential has so far been squandered.

Discovery is bad. This is a different topic than this blog.

Almost everything the author wrote was not a strong truth or reason.

“Shock Comedy” not being created has nothing to do with people’s sensitivities. It is just the same symptom you already noticed, movie theaters are for Marvel right now. So to make a separate standard for the lack of shock comedies is just latching on to unquantified assumptions that paranoid people are saying about cancel culture.

I hope they find a way to branch out, I have been pleasantly surprised at film festivals.
Don't like 99% of small businesses fail?
Eve Online's Self-Imposed Economic Collapse
Sure: I don't have any strong opinions one way or the other about Not All 4chan so feel free to amend "4chan" to "the worst bits of 4chan" if you think that's more accurate. But IME when you hear someone say "no, that's just /b/" then it seems that usually you hear some other story pretty soon afterwards which suggests that it's not just /b/.
Iceland Cuts Working Hours with No Productivity Loss, Same Pay
> focusing purely on type- and memory-safety, not conformance to arbitrary specifications

What are types if not arbitrary specifications? Are you suggesting that formally verified software is not memory safe? What on earth does "scalable" even mean? A verified program cannot scale? If not, why not?