skysight-inc/HackerNews huggingface dataset:
Here's a screenshot of what I see when I look at page 358 of the updated link, which looks fine to me: https://snipboard.io/OwvDXH.jpg

I don't see the fading that you are talking about.

Meanwhile, here is a screenshot of the way that page 358 of the book in the original link is broken when I look at it both on desktop https://snipboard.io/G9ohqg.jpg and on mobile https://snipboard.io/VXYHC0.jpg
Introduction to Computers for Literal Noobs
If you divorce JavaScript from the Dom you have removed it's entire reason for existence. So the dom is effectively part of the language. Just as the standard library is effectively part of C or Nim, etc. Without them they are considerably less useful.
We received and forwarded to various groups at FBI and DHS at the onset. The running theory here is IPv6 to iPv4 routing is the problem with this incident. Generic and trusted config as where any ipv6 arbitrarily “just works” to a trusted IPv4 block with existing rules. Most IPv6 implementations do not have the detail scrutiny in firewall rules to prevent or filter, and IDS this type of thing from happening.
A Case Study in “Specification Driven Programming”
The final black hypercube design looks modern even for contemporary standards.
All the biogs say the same thing - some of the classics were written in hours. They'd jam, make a few changes, maybe argue a bit, and boom - done.

Bands are like chaotic attractors. An unstable system is more creative (energetic) than a stable system.

If a band is just unstable enough it will produce some amazing work before the inevitable breakup.

The amazing work is a result of harmony and passionate dissent in unstable equilibrium. Sooner or later the dissent wins - but perhaps this is both more inevitable and less sad than we think it is.
This has long been possible by using the SSH key via the openssl command line, since they're available as PEM. I've relied on that occasionally in provisioning code, albeit specifically using the server key rather than a client identity. Heck, you can even use them for encryption that way.

Nevertheless, it's nice to have some more direct support.
I agree, but I think it's pretty clear that web-of-trust has failed. There may be 6 or fewer degrees of separation between us, but the chance that there's a path of people that actually validate and sign keys isn't very high.

As an alternative keybase.io worked well. If you knew the person controlling the github account also controlled the mastodon/twitter where you talked to them, and the website/blog, etc, then you can be pretty sure it's them. (I saw mention of more open systems here too https://news.ycombinator.com/item?id=29132024).

> I'm all for using SSH keys for signing, but I still would like to have something like PGP's web of trust for those keys.

same here. I use my gpg key for ssh (stored on a yubikey). Seems like a better option to me.
Wonder if it will include any Pete Best (original drummer and unofficial original manager because of how early this was in their history). None of The Beatles members ever properly did the right thing by him in their lifetimes. Quite a disappointment.
Similar to the second approach, you can have better ergonomics and performance by using a memory arena library like slotmap. A doubly linked list implemented using slotmap: https://github.com/orlp/slotmap/blob/ce6e1e02bb2c2074d8d581e...
To be fair withoutboats didn't really address any of the points that people make about the flaws of async Rust (e.g. the cancellation problem).

It may be the case that there's no good way to solve them, but that doesn't mean that they aren't problems and it doesn't really help to say that people who highlight them are totally wrong and don't know what they're talking about.

That said I think your second link does a much better job of explaining the issues than this post does.
Life is too short to depend on unstable software
GitHub – Airbnb/JavaScript: JavaScript Style Guide
We don't teach all kids to be plumbers and electricians and car mechanics, but we do teach people to use them safely. And if people want to learn, the resources are out there. How is coding different?

Well, it's different in a million ways. But people don't need to know how to service a car to operate it, and this has made cars harder to maintain, but also much, much cheaper and more accessible to others.

I'm not sure what point I'm trying to make anymore, but your post has made me think. Thank you.
> With that in mind, I see this article as not understanding the goals and tradeoffs of Rust. The author would be happier writing in a higher-level language than Rust.

This is a really unfair call to make.

The author rightfully so goes to great lengths to avoid talking about those trade offs, specifically because they're irrelevant.

Async in rust is hard is the complaint.

It's not suggesting there aren't good technical reasons for it. Just that maybe implementing something that turned out to make a mess in the end wasn't the right move. Instead, maybe other options should have been explored.

The article listed what, 3 different ways to do Async?

You suggesting there isn't possibly a better way to do it because of zero cost trade offs is just gaslighting.
I think one of the most compelling reasons of using ssh for signatures is the possibilies of ssh-agent and especially agent-forwarding which allow for incredibly portable workflows like ssh to a ci/build host/container to sign some production binary/container/tag.

Please note that these come with their own pitfalls and precautions you'll need to take to ensure your key's safety!

If you consider agent forwarding i'd recommend use of "ssh-add -c" to have your agent at least confirm every use of your private key. Generally for private key security i'd always use a hardware token. Modern yubikeys are really easy to use and you can even enable touch policy instead of the agent confirmation. The UX for this is still a bit lacking in the tooling though.
due their reliability and over the tp. It always overfelivered. during its first decade, If anyone read any of the books from its founders, papers, stories related to the company and them it seemed to be the new "non zero day" infrastructure, however the longer the company alive is the more it feels just like any other.

Unrelated: not sure what is going on on HN since a few months but almost all comments I get to write get automatically downvoted, even little things that no one should really care much about.
Setting the tone in a group is important
I certainly doubt that this is evidence that linux is not ready for non-technical user prime time. Why?

Because that kind of shit also happens on Windows. With administrative access, you can always kill your machine.

What Linux lacks and what Windows has more then enough is informal support services. You know, that person in the family that just knows their way around computers, that does computer stuff.

(Almost) every elderly person above a certain age is lost when it comes to computers. Most people alive cannot be trusted to install an application - not on Windows, not on Linux and not even on OS X (well, maybe on OS X nowadays, because you cannot install unsigned software these days) because all that software might be compromised. Every time you let a software on to your system, you can potentially brick it. And then you need a solid understanding of what's going on.

For most people, computers are black boxes whose internal state is a mystery that is far too complex to be explored. They have no interest in exploring these mysteries. They have work to do; forms to fill, letters to write. And these people need the aforementioned informal support they can turn to whenever they need to diverge from the well-trodden paths. It doesn't depend on the operating system, but on the surrounding support system.

That's why I don't consider that video evidence that Linux isn't ready for prime time, just as I wouldn't consider a video of someone bricking their Windows as evidence that Windows isn't ready for prime time.

These people just need someone they can ask for help. For my family - that me.
There are thousands of cryptocurrencies in use today. If you're out after faster transactions with lower fess, Algorand seems like a good option. Fee seems to be about 0.001 ALGO (0.002044 USD) about finalizes in about 5 seconds.
Nah, you're really not.

Most of the time, particularly if you're not writing libraries, Rust feels like a dialect of Python that wants to help you get things right.
It’s just become a word of exclamation, hyperbolic at that, no? If someone literally moved to a town yesterday, they probably mean neither literally nor figuratively, but rather, just highlighting their short tenure at the new place.

I’m a bit of a language pedant, but find it difficult to argue with the society assigning new meanings to words as the language evolves. Modern English is a tragically malformed and bastardised version of Saxon mixed with French, after all.
Common Lisp has libraries that are 30 years old that still work. The community seems to be (slowly) growing right now. The core language supports some fairly complex functionality out of the box. There are a number of widely used libraries that add to it with things it is missing due to age such as threading, atomics, and crypography.
Data-Oriented Architecture (2020)
Aside from CL implementation bugs. The implementations had lots of them back then, even the commercial ones. Nowadays, they are much better. Decades of effort to make an implementation bug free and shiny will have its effect.
Exceptions are a mechanism for error handling that comes with control flow changes.

But Rust already has perfectly nice control flow mechanisms (look at std::ops::ControlFlow for example) and perfectly nice error handling. So you can use either, or both, as necessary, you don't need this particular Frankenstein's Monster.

Using Exceptions for things that aren't actually exceptional is perverse.
With ssh-agent, up to five secret keys are tried (that’s a magic number on the server side). After five, I guess you must specifically maintain which secret key is used for each host or hostname pattern.

If you frequently move between workstations, maybe look into the new hardware key features (Circ’s version 8.3). If you have multiple users that all connect to the same account, a SSH CA (circa version 7.4) would permit new access without needing to constantly modify server-side authorized_keys.
Shouldn’t he have stayed in Russia where he wouldn’t be extradited to the US? It appears he may be extremely arrogant so perhaps he thought he would get away with it.
The future is what we will make it to be. Be the change you want to see in the world!

(As a father of two kids, I admit it is wickedly difficult to get them honestly interested in programming.)
What I mean is you put your library and all services using it in a single repo.
Have you tried sending $10,000 or more between two "high risk" countries, like from Nigeria to Ecuador? There are so many limits for most people using banking today, where your money gets stuck in multiple places before you "verify" this and that, and then transfers take multiple days if they even get approved in the end.
To get into insert mode in vim you press I for the front of the line or A for the back.
Ethereum has standardized ways to formulate (off-chain) signatures for arbitrary messages [1] and Solidity structs [2]. Convenient command-line tooling is lacking currently, but some interesting twists to consider:

If you sign using a key that also controls cryptoassets, then you're incentivized to keep the key safe and secure indefinitely. Contrast with tendency to lose GPG and SSH keys after losing interest for a few years, changing jobs, etc.

Moreover, consider key revocation. The revocation mechanisms for GPG and SSH keys are not that effective, due to impracticality of publishing your revocation in a way that really ensures subsequent verifiers are alarmed. If only there were some sort of decentralized, permissionless, globally-replicated database which verifiers could check for that information...

More generally if you have a really important signature to publish, you can mint an NFT for it or otherwise inscribe it on the blockchain. There it will live, irrefutably notarized and timestamped, forever.

I explored these ideas in a weeklong side project [3] that only got to cumbersome proof-of-concept stage.

[1] https://eth.wiki/json-rpc/API#eth_sign

[2] https://eips.ethereum.org/EIPS/eip-712

[3] https://github.com/mlin/stakesign

Footnote: Bitcoin also had an arbitrary-message-signing mechanism -- commonly used on bitcointalk back in the day -- but I think it may now be ~defunct due to not keeping up with the newer address types introduced in recent years.
We are talking about different things.

1. The probability of a BI is not the same as the relative probability of a vaccinated person infecting another person. I also refer to “vaccinated people“ to mean “a population of vaccinated people”, which is where the big gains are.

2. The day before they get their booster shot (6 months) is not the same as the probability overall, counting the best and moderate days of immunity too
I'd say seat belts more than handcuffs.
When going low level it's easy to slip in memory leaks and security vulnerability.

If you care about developer speed and security but don't care about correctness or performance you can rely on someone's else implementation and write higher level code (eg. use node and offload low level security considerations to node).

If you care about developer speed and performance but don't care about correctness or security use a low level unbounded language (eg. write C and triple check your code)

If you care about security, correctness and performance but don't care about developer speed, use Rust.

To be frank I find the point about developer speed in Rust to be a bit exaggerated, it's pretty high level and the tooling is pretty great.

- Compiler speed is a bit hit or miss
- Debugging life cycles definitely take some time, but with time you get the hang of it and you can quickly copy paste previous solutions to the current problem.
- You save a significant amount of developer time by fixing things alerted by the compiler instead of finding errors at runtime

All things considered Rust is definitely the language I feel more productive in (before it used to be Haskell).

Oftentimes considerations about hiring / collaborating with other developers take the precedence over security, correctness and performance.

Right now I'm maintaining a node.js project, 2 Python projects and a Rust project - mainly because node.js and Python worked best with those teams and the Rust one is a solo project.
> I also work at Amazon, and I can tell you, your experience was pretty unique. Some teams are worst than others, of course, but no one expect you to pick up a project by yourself, fresh out of onboarding and own it end to end.

I am a SDE at Amazon and I can tell you for a fact that so far the majority of the projects I've been involved roll out exactly like this. The excuses vary, and fortunately I haven't seen the inclusion card in play yet, but all the gaslighting and sacrificial lamb elements and shifting responsibilities and career tactics are ever present.

> if you were hired for a specific team, and you feel is a bad match, you can talk to your recruiter/hiring manager and they will find you another team.

I have to call bullshit on this. Either you play that out in stealth mode until you are sure the other team picks you, or you are in a world of pain. As soon as you click on the recruiter button, your SDM and senior SDM are notified immediately, and if you are not in the best terms with them they can and more often than not do screw up with your plans and even your job. There's a horror story around my corner of the org of someone who wanted out of his team and simply did what you said should be done, but long story short his transfer was sabotaged by the SDM who afterwards placed him in a performance improvement plan with no return.

> But for them to fire you like that you have to be doing pretty bad, or maybe your manager felt you were a bad person.

No, not at all, at least from what I see on a daily basis. All it takes is that you get in the way of your manager's career goals. They have attrition metrics and goals and you have your yearly Forte to cull the herd and keep the average tenure below 3 years.
Oh those! To me a scooter is a thing you sit on, pull the handlebar and get to 45km/h (30mi/h), and typically using gasoline (though electric ones are becoming more of a thing). In dutch we call the other things "step" because you, y'know, step to go forwards.

These electric stepless steps, to me, seem mostly dangerous depending on the driver. They're in a number of cities here now and I almost killed one of them because they were coming out from behind a tree at full speed, and I was driving less even than the speed limit (50km/h) because I was approaching a crossing, but I didn't see nobody and this person just flashed by right in front of me. They could have seen me coming but I couldn't really have seen them, so that's just stupidity on their part (even if likely I'd have been responsible because they went straight, if on the sidewalk because the actual street was closed for construction, and I was turning off and so should give right of way also to pedestrians). Also on dashcam videos online you see similar stupidity, i.e. them driving on a part of the road where cars are also allowed, not considering other vehicles at all, but it's outliers by and large. If you're a responsible 'step' scooter driver, you'll be fine.
> UK data shows vaccinated people are drastically more likely to get it and spread it than the unvaccinated.

This is not true. Vaccinated people are less likely to get and spread Covid. I’d link you to the CDC but it’s probably redundant.
I'm don't doubt that you know more than me about this, just coming at it from my very basic knowledge.

By pair of pairs I just mean that you're looking for two solutions, and they turn out to be computed numbers, both of them.
Not at all! You’ve covered all of the major threat vectors that others would dismiss or not know about. You’ve got true expertise in this area, my friend.
Red Notice – The Shrink Next Door – Passing – Violet
I have become more and more convinced that unspecified behavior in a standard is a bad thing. No, giving compiler implementers room to exploit variant behaviors in the name of optimization is generally not a good idea. I understand the political reasons for it, but that doesn't make it good.
Also: "reached a test altitude “in the tens of thousands of feet,” according to Yaney."

Why so vague?
Im not denying that the eastern part of the Roman Empire continued to flourish, but you can’t ignore that Western Europe stagnated for almost 1000 years.
The Chinese governments go/to response is to yell “racism!” whenever China is held to account or attacked.

It’s genius really. They know that so many people have a deep instant response to the cry of racism and the CCP uses that to their advantage.

In this way they masterfully play the west like a fiddle.

They get all the people opposed to racism to stand up for China. And none of these anti Racists have a clue - they think they’re “doing the right thing” when in fact the CCP is laughing itself silly at these useful idiots.

So yeah, “sinophobia” buddy, not a belligerent aggressive authoritarian bully state hell bent on subverting the political systems of the world to control everything. No, “sinophobia”.
Europe? Upward mobility?

Please do post your source. In my own experience and research, that is very limited in Europe.

I would argue that there are actually more disincentives than incentives for class mobility in Europe (which is where I live).
It's odd that you make an argument that democracy and popularity are important in response to the point I'm trying to make.
Show HN: Oh no, not another todo list
Hi, Peter.

I applied for N400 in April and had the interview and passed the civics test in October. But in the end, the officer asked if I owe any money to IRS. In the paper, IRS thinks we owe them $12K but in fact, we don’t. We’re still working with IRS to resolve the issue, it’s been in process since January 2020 and I don’t think it will be resolved any soon. IRS is shorthanded because of Covid.

The officer gave me a deadline until 22nd November and requested to mail them “A signed agreement from the IRS, state or local tax office showing that you have filed a tax return and have arranged to pay the taxes you owe; and documentation from the IRS, state or local tax office showing the current status of your repayment program.”

I’ve scheduled an appointment for 29th November with a local IRS office, that’s the best we could do. And tried to call USCIS to extend the deadline but it’s not possible to talk to any human being over the phone. Is it possible to go local USCIS and get an extension? Is it possible to get an extension in general? I don’t want to pay another N400 fee and redo the interview. Is there any way to resolve this with USCIS?
I find it fascinating that one can be intelligent enough to be able to do something like this but they just couldn’t put together a coherent enough email to actually fool you, especially because they seem to have a decent enough command of English. The tone is waaaaaay off though.
And you can do things like redefine classes and all the extant instances of that class (or its subclasses) automatically are updated.

The general workflow is: compile and load your program and tests, run the tests, change the code and tests, recompile and reload changed files (using an internal dependency manager that is something like a make system), and continue.

The focus on the repl is a bit misleading, since all the changes are off in files. I mean, you CAN type in a new function definition to the repl, but there's not much point.
What’s hilarious is Canadians banks can come up with that all on their own.
Attaching this to cryptoassets increases your operational (more mental overhead, doesnt work with simple keybearer devices, you assume people to be lazy and bad at key management) and technical (irrevocable ethereum-bugs that can only be mitigated by chain splits) complexity.

Albeit for long-term public signatures I see the benefit in spreading the sig and revocation information from the classical tools in to as many hard to modify places as possible. Popular global databases like Ethereum and similar are good condidates for that.

And of course have the verification scheme expose inconsistencies between different key-sources and tag them with their respective power structure categories. (Lime Government, Cryptocurrency-Devs, HugeCodeHostingPlatform, CompanyBehindHugeCodeHostingPlatform, etc...)
Why shouldn't they be? Public keys are perfectly safe to be shared publicly. Otherwise RSA would have very limited value.
Show HN: Monte Carlo Methods or Why It's a Bad Idea to Go to the Casino
If I remember correctly there were still some scientific works being published in Latin in the 1900s
The Beatles impact on modern life is difficult to understate. Consider this: music as metaphor, which surely existed before the Beatles, became required for any serious critical acceptance. Before that, Rock and Roll was pure bubblegum, and afterwards: a political force.
There's an article from the New Yorker recently on the doc, and it touches on how Paul especially was almost a workaholic. He eats, sleeps, and dreams, songwriting and can't help himself.

Apparently they'd finish songs, and go off for a break. Then the very next day Paul would phone them and say, "right, I got some material. Let's get recording." Ringo made it sound inspiring, and pretty exhausting to interact with.
Perhaps the human effort needed to see their goals through requires that they filter for only the targets that would fall for such a poorly constructed effort.