skysight-inc/HackerNews huggingface dataset:
Well, the performance seems to be mostly the same https://mayankchoubey.github.io/Deno-vs-Node-Performance/.

> It is a completely independent code base.

Not exactly, the heavy lifting is done by v8 on both sides. Deno can do lots of things around the ergonomics, and switch around the event loop (though libuv is already pretty good), but outside of that they are mostly equivalent.
Also NG plants have the potential to burn various levels of hydrogen mixed in with the natural gas. It could be a nice compliment to areas that over-provision solar and wind and make hydrogen with the excess energy.
I do not have the same ideologies my parents do.
I think that's a false choice; rather than choosing between anti-VRU bias (as present) and anti-driver bias (as proposed), why not choose to report the specific facts of the incident at hand? Blaming one party all the time is stupid, because one party is not always at fault.

Edit:

Your cessna example makes no sense, as cars and planes do not generally share space. Should bikes and cars share space? No, but that's part of the systemic aspect of the problem.
The Aaron Swartz prosecution continued, even after MIT and JSTOR said they didn't want to press charges, because of a zealous prosecutor.
Yeah it is a skill set in and of itself. To pass a modern interview in my experience you need to take a week or two on Leetcode to brush up and do a run through Cracking the Coding Interview for concepts/terminology. In my opinion this is fueled by an abundance of excellent sheep (a good book) among hires at tech companies. If you’re trained for years and years (middle, high school, and college in the US) to study for SAT style tests (cracking the coding interview is full of test taking tactics) then when you’re asked to design interviews this is stuff you gravitate to because it’s easy to reproduce and understand. An excellent sheep appears to be a high achiever but only knows how to be given hurdles and jump them, not how to identify creativity or get nuance out of an interview process that is already woefully shallow. So it’s all people who spent lots of time studying for algos and data structures class asking each other those same questions. Asking “Are you one of us?”
Show HN: WaveTheVoice – Generate NFT waves from your audio records
“Debugging Teams” is now free to read online
Its more the realization that you aren't safe, and that your safety is not only not a priority but somehow actively repugnant, all due to you being on a bike.

If you are a kid driving isn't an option. If you don't feel safe on the roads as a pedestrian or bicyclist then your options are rather limited. This was my own experience, and if I had been less reckless I would have gotten less exercise. As it was, telling some one about a scary experience like a car almost hitting me was usually almost always met with a story about how terrible cyclists are. Its weird.
Lol. I mean that was the whole point of the states. Then the federal government gained too much power. Why the federal government has policies that affect Florida the same as North Dakota is asinine
While we are here, Futures from fantasy land (in js) are better promises because they don't execute immediately and they need to be run manually
It's called biphasic sleep, or the more general term, polyphasic sleep.
I run GrapheneOS on a 4A with TMobile and the frequent reports of people trying to call me telling me my line is out of service and days where calls won't initiate from my phone at all makes me want to run back to my iPhone.

The tethering seems to be pretty flakey as well with me often having to reboot the phone.
Google's Looker Partners with Tableau
Tail risks. Black swans if you wish. Unknown unknowns which leave the immediate area uninhabitable forever and a wide radius for generations.
Wow. That's terrifying. And you didn't even run anything!

I'm guessing that they never told you "don't browse this network drive"?
I've tried Osmand and found it way too slow/janky for everyday use (since it has to render the tiles locally and doesn't seem to pre-render for scrolling).

Newpipe loads videos much slower than the official app and occasionally fails completely (likely because YouTube changed something).

F-droid (regular, non-root install) shows me notifications to update apps, then when I tap them, I get a "there was a problem parsing the package" - this is a bug that has remained unfixed for over 5 years (https://gitlab.com/fdroid/fdroidclient/-/issues/669).

It's not impossible to use a FOSS phone, but it's truly painful.
Quick! Hire them before they can use their powers for the forces of good.
> As a society, every extra dollar spent on pricier energy is an extra dollar that can’t go to social programs, or to new start up, or anywhere.

If you are arguing to stop subsidies for fossil fuels, sure! Let's do it.

Without any subsidies and with externalities accounted for, fossil fuels would be even more expensive than renewables.
The problem is, it isn't "needs of hardware devs" vs "rust". The kernel exists to abstract over hardware. Almost everything in the kernel* is written by "hardware devs". So any benefit Rust brings will be FOR the benefit of hardware devs.

* - There is some cryptography stuff in the kernel (that probably doesn't need to be in there anyway) and that isn't written by hardware devs I suppose.
That's even true if you make your developers commute into Yellowstone National Park by ski every day
How to Make Diverse Leadership Teams
> Our work show that SHA-1 is now fully and practically broken for use in digital signatures

Yet 2nd preimage resistance is intact. Zzz.
I head up Dev Advocacy at Render (previously at Heroku). Happy to answer any questions about Render.
Your school didn’t have paperclips?
I wondered if that would be the case, it would make sense.
Only risk that if someone reverse engineer yours wasm/JS module, they will still get the data from that point of time. The above approach is good if data changes over time. I think this should stop most people.
It gets worse — technically speaking, your second ‘WebDataStatus’ is also a sum type! Admittedly most non-functional programmers would call it an enumeration, but nonetheless, a language without support for any sum types at all would also necessarily need to lack enumerations. (I therefore prefer to think of most non-functional programming languages as having an incomplete implementation of sum types rather than having no sum types.)
I don't see why anyone would want to build an international monetary system on top of something like bitcoin which was designed and developed by people who clearly know nothing about finance or monetary economics, but maybe it's just me...
Subrepo hash substitution could enable a supply-chain attack
> you are presumably a novice after all

I'm 49 and I've been driving since I was 16.

You can absolutely react to hazards without appearing skittish, which also alerts other traffic to the hazard if they're paying close attention.

Trying to drive like a robot all the time is something that actual novice drivers think makes them better drivers.
From a practical point of view, how would injecting malware happen? If you're trying to insert a malicious diff somewhere deep in the git history, you would need to recompute all the other commits after the injected commit - which would most certainly change their commit ids too if they are touching the same file. When other commit ids change, the malicious change becomes detectable.

There's also the case for auditing: force pushing into an existing repo triggers an event in GitHub and is logged. While the logging event can be missed, it leaves a paper trail.

With things like reproduce-able builds, this also becomes harder. Distributing (through a means of a fork, or putting it up on a website mytotallylegitgitrepos.com) source code which builds into a binary which doesn't match upstream hash is suspicious.
Reminds of me my school leaving prank. I rewrote the whole internet on my school's computers. Google's logo became "Leavers '08", Facebook became "Hatebook" and was red, YouTube only played videos of cats, amongst other things.

These were the days when nothing had SSL, so you could just intercept and rewrite traffic!

My only requirement was: do no actual damage

It was implemented as a Debian live CD that you could drop into any school computer. It would boot up, then Ettercap would MITM the whole network by spoofing the router. It routed all HTTP traffic via Squid and a custom ICAP server that did the actual rewriting. If you removed the live CDs, the network just went back to normal within a couple of minutes.

Routing the whole school's network through one old Pentium machine wouldn't work though, so I figured out a way of doing distributed load balancing: it would do the ARP spoofing slowly and randomly. So, as you added more machines, it would just magically balance between them.

It worked great for about an hour then whole network mysteriously stopped working for the rest of the day. I left all the live CDs in the computers as a calling card.

Sorry, school network admins.
The progression here is pretty funny. Prometheus is a clone of the deprecated monitoring thing at Google. It's really awful but the public loves it, for some reason. So now Google offers, as a service, a clone of Prometheus running on top of Monarch, the thing they developed to replace borgmon, which is the thing that inspired Prometheus.
No, they are saying is we currently don't know what is going on good enough to be able to tell which model actually predicts reality.
You wouldn't be able to use normal code, ie. loops, if statements, pattern matching etc. What you're trying to describe is monad'ish like promise or simply callbacks. Algebraic effects are much more general, code is normal sync like code, you can have async/await semantics without function coloring, you can customize code with dependency injection like behaviour ie. you can define logging effect in your library without specifying which logging library your user has to use as caller can customize it etc. It's not as much type system extension as new language construct – it's simply try/catch'ish yield burrito :)
https://www.vox.com/2016/2/29/11132930/nuclear-power-costs-u...

This has some useful charts.

It shows that nuclear still has economy of scale to improve, if we give it the chance.

The big difficulty for nuclear is public pressure/fear of accidents. People are much more afraid of "big scary nuclear accident" vs. probabilistic deaths caused by air pollution, even if the deaths from the latter is in the tens of thousands and the former is in the dozens.

That fear of public/policy backlash makes raising capital in order to actually benefit from those economics of scale very difficult.
Ascribing blame for a company’s actions to its employees is questionable. They play a small role, for sure, but much more culpable are the shareholders and executives.
It's supposed to be hard for stuff to get passed. It's designed that way. As much as people look down on the founding fathers now, they were actually pretty smart.
Sort of..an individual smart contract is completely immutable; the code cannot be updated. You can create a proxy smart contract that points to the contracts actually handling execution, and update those pointers to point to new, updated version of the code which is what I assume you're referring to.

Plenty of popular smart contracts do not do this though, and are fully immutable. Rather than updates, the developers upload a new version. Users can use the new version, or stay on the old one forever (the developers cannot delete it).

Regardless of which one, though, this is known ahead of time. A user (or, more likely, a community of users) can inspect the code and see to what extent the key holders can modify functionality.
How so? This is identical to piracy. Taking IP one doesn't own, stripping it of it's ability to make money (removing ads), and redistributing it without permission.

Copyright infringement can get complex but this is one of the simple cases. Was the software under protection? Yes. Did the redistributor have permission? No.
> Credit where credit is due, we all WISH nix had something like PowerShell.

Who is "we". I've worked exclusively on a windows stack so used powershell on the job. But at home, I use bash. I don't want something like powershell in nix and don't use powershell on nix even though it's been available on nix for many years now.

> Passing strings from program to program is a pain

You can argue it's the basis of computer science and also pretty efficient.

> passing around .NET objects instead is a great step forward, as can be seen by the several attempts at similar shells passing around JSON objects.

Passing around objects can be slow, inefficient, wasteful, etc though it can be convenient.

If you are on a windows stack then go with powershell. If not, then go with bash. Nobody should be on a windows stack but sadly, much of the business world has been captured by microsoft.
Alright, since it's an interesting subject I'll take a detour :

The only reason the Emperor of Japan is called an Emperor in Western translations is probably because within Japanese historiography it's considered the highest possible title for a head of state of any kind and in European precedence tradition the equivalent is Emperor, with the exception of the King of France [1].

All that to say that there's no need to call back to the military history of the term to explain its significance in the context of Japan.

[1]: the Medieval Empire, that is what is commonly referred to as the HRE, being an outgrowth of the Frankish realm, there's been a tacit understanding that the King and the Emperor were of equal standing and wouldn't dispute each other's claims. Hence the notion that the King [of France] is Emperor in his Kingdom, which is of great importance in the conceptual history of sovereignty.
Note that the King of France in the Age of Discovery had an Empire, but never claimed an imperial title as it was a core ideological principle that no title could possibly be above King of France. You can see some of that in the Japanese 天皇.
Deno v1.15 Released
Yes, for the same reason that if you want to do logic, you'll need both the "and" and "or" operators; neither "and" nor "or" alone suffice.
All of the LineageOS phones I've ever used have been able to maintain a Bluetooth connection in the background.

If you're fine with a used phone, the OnePlus 8 has a high-end Snapdragon 865 processor and 8 GB RAM.[1] The carrier models have IP68, and unlocked models are manufactured similarly but don't have an official IP rating.[2] If you're getting the T-Mobile carrier model (which may be carrier unlocked at sale), you'll need to request a code and wait a week to unlock the bootloader before you can flash LineageOS.[3] Used models go for $200-300 on eBay depending on condition, and a new factory unlocked model is $399.

If you're looking for a new phone, you may want to consider the Pixel 5a which manages to have both IP67 and a headphone jack for $449 new, but uses a mid-level Snapdragon 765G processor paired with 6 GB RAM.[4] The OnePlus 9 Pro is also available with a high-end Snapdragon 888 processor, 12 GB RAM, and IP68 for $969 new or about $600-800 used.[5]

[1] https://www.oneplus.com/8

[2] https://9to5google.com/2020/04/14/oneplus-8-ip68-water-resis...

[3] https://www.oneplus.com/support/answer/detail/op588

[4] https://store.google.com/us/product/pixel_5a_5g

[5] https://www.oneplus.com/9-pro
> It is just no longer considered secure for cryptographic operations, such as digital signature, that doesn't mean that you can't use it for other purposes, like git does.

Git effectively uses its hashes as a component of a digital signature scheme, in the form of signed tags and signed commits. The GPG signature covers the commit object, which identifies the content (tree) by its hash.
Because such an operation is unlikely to succeed even if the hashes match, replacing SHA-1 was not a high priority for Git.
Contrary to the mainstream narrative on Bitcoin, it's not purposefully designed to bypass regulation, depending on which type of regulation we're talking about.

Bitcoin's power lies in its controlled supply that is absolute and guaranteed. As such, you can argue that Bitcoin is regulated in its monetary policy (by verifiable software), whilst the traditional system isn't. The entire reason Bitcoin now has a trillion dollar market cap is the unstable traditional system where savings have a negative return.

This is the step forward, not backwards. At least to those believing in Bitcoin. You gain protection against central debasement and you gain a brand new ability: Bitcoin is unconfiscatable.

You're right that crypto custody is harder than a traditional bank account, although it doesn't have to be. People can chose between die-hard self custody (cold wallet), hot wallets, and soon there will be more fool-proof mainstream options, I believe Twitter is working on one.
Docker compose doesn’t get the love it deserves. The most recent versions even dropped requirement to specify the schema version, it’s a beautifully compact way now to describe services and their relationships.

I have used docker-compose for my one man projects for years, removes any need for me to remember any kind of specific deployment steps for a given project. One of the biggest time savers in my entire career.

At last they are finally bringing the functionality into the core docker CLI with a native "docker compose" (not docker-compose) command - why that took until 2020 I have never understood, can only assume internal politics. If compose had been integrated sooner maybe adoption would have been wider.

I've actually come across your project before and keep meaning to try it for my PiHole/HomeAssistant/WireGuard setup etc, will check it out!
But the point is, if you're trying to get maximum protection from infection (the implicit being the damage that is caused from being infected), getting infected first seems to truly miss the point of the goal. You're taking on all of the risk of getting infected, in an effort toward lowering the risk of being infected.
We kinda do a similar thing as a Jersey (Dropwizard) response filter, any internal server errors end up in a Slack channel
Not to remove from some of the valid concerns made in the article, but I find it ironic that a post decrying centralization of Ethereum services is written on Medium.
Of course -- but we aren't the ones making the rules, and the ones who do make the rules have certain incentives that lead them in dark directions.
For me, yeah this would be a much different experience. I use this feature all the time, to select anything from the title of a song on Spotify to a phone number embedded in an image on the web.
worth noting that this is via a single drive. albeit one of the fastest lowest latency non-dram drives on the planet yes. but you too can go to a store & buy a "alder stream" p5800x generation-2 optane drive & make millions of iops. in a pcie or u.2 form factor drive. bloody magical, just incredible.

just like the initial intel marketing material pitched ("multiple millions of iops") and getting better!
That sounds like an excellent start to me, what other techniques might be out there though? If we never look (as advertisers have done with marketing products in order to accomplish their goal: make people buy their products), we may never know.
For someone to be able to break your repo using sha1 collisions, they need to be able to commit to it.

If you don't trust someone, don't let them commit to your repo.

> Were they so in love with the performance of C/C++ being able to pass around 20 byte hashes on the stack without worrying about a more complicated structure (eg a collection of variable length hashes)?

The hashes show up everywhere. They're how every object in git is identified. They make it onto disk. They're not just commit ids.

Changing hashes changes the disk format.
Collisions definitely do matter for git security: many people pin explicit git hashes for their dependancies, and thus they can be tricked in running malicious forks. This requires placing a chosen commit in the git repo (so unlike second preimage break it does not mean that you could attack repos you have no control over) but that's not an unrealistic threat model overall.
One thing that's neat is that with functions as exponentials (A^B being the type of functions taking a B and returning an A) all of the identities you learned in highschool algebra made up of only addition, multiplication, and exponents (division and subtraction don't quite have exact analogs) hold as isomorphisms. Writing the functions to take you in either direction can be an interesting exercise.

For instance, (A^B)^C = A^(B*C):

(f) => (b, c) => f(c)(b)
(f) => c => b => f(b, c)

which, of course, is currying and uncurrying.
Depends on how you see it. If you look only at the "usage" part, I think my point is fine. There's another part of the equation, which is the media. Internet and printed text (which was what used full caps titles) are not the same, so applying the printed text rules to internet text doesn't make sense. But my point about usage evolving still stands. Things change more quickly these days than before. So comparing simply the length of time something existed is a fallacy. I don't know if it's possible to compare this exactly, but I would suppose, in terms of "evolution of culture/usages", an internet year is worth at least a decade of printed text before the internet.
YSFlight RIAT 2021 – The Marine's Rally: A Tribute to Gunny [video]
And numStolen.
At least web masters will get that spam they so dearly want.
I wonder how much money in Bitcoin they would have made if they had used those hashes to mine instead.

Speaking of which, it would be funny if they were pretending to do security research but added a secret backdoor to mine bitcoin instead, somehow exporting those hashes or using the partial results of SHA-1 calculations (BTC isn't SHA-1).

I'm just joking, but I wonder if that's possible. If anyone is Machiavellian enough for that, it's security researchers.
Yeah, go to them about ransomware gangs or nation state actors and you basically get told "lol we cant do shit". Complain about a kid prank and theyll go apeshit and make a, uhh, federal case of it to make themselves feel needed.
I completely agree, that’s why I said “wind, solar and batteries” :)
Yes. A sufficiently wide neural network with a single hidden layer can approximate any function arbitrarily closely.
The biggest performance hit that is educated everywhere is accessing pixels through getImageData() as bytes. In many cases it is way better to access it as a 32-bits RGBA value, like with:

const rgba = new Uint32Array(getImageData(0, 0, width, height).data.buffer);
rgba[y * width + x] = R | G << 8 | B << 16 | A << 24;

And using Array.subarray as substitute for memcpy() for block copy:

function memcpy(dst, dstOffset, src, srcOffset, length) {
src = src.subarray(srcOffset, srcOffset + length);
dst.set(src, dstOffset);
}
I tried it out on https://www.denverpost.com/2021/10/07/medina-alert-hit-run-c..., which I would think in general a group like Vision Zero would approve of, and it got a C (-1 points), because of the phrase, "[The] vehicle will have heavy damage". This seems pedantic, at best, since the whole point of that phrase is to help the public identify the vehicle (and presumably the driver) which was involved in the accident.
`git push --force` I assume. In GitHub, this will leave a trail of events though - Webhook events and auditing.
Healthcare software development with EPAM Anywhere Business
Blockchains are a profitable form of discourse. They don't have to do much of anything, and typically,they do nothing at all.

The function of blockchain, is mostly to obfuscate desire, in the interest of increasing confidence.
The reflog shows changes to references. References are hashes. Git is CAS, and uses the CAS assumption: H(m1) = H(M2) <=> m1 = m2.
What is "uniflow" about it?