skysight-inc/HackerNews huggingface dataset:
Totally agree with you. I remember reading somewhere (maybe on HN) that Japan is an extremely consumerist society. I don't know how true that is but, like anywhere, some are going to be more conscientious than others and I've heard all these same ideas on western blogs.
ssh keys don't have expiration dates, but ssh certificates do [1]. Which is.. how it should work. A certificate is a declaration of providence of data, a key is not (in itself) that.

At any rate, if you want to tell me you actually believe most users of PGP actually properly deal with key rotation and don't just give up and set unreasonably long expiration cycles on their keys or stop using pgp when they first encounter an error about an expired key, I might have a bridge to sell you.

[1] See `man ssh-keygen` for the -h and -s arguments and -V for the validity window.
yeah, that's by design. how do you check borrows in a mutable self-referential data structure? you don't by definition.
UK didn’t really have ID cards while in the EU. They were introduced at one point, but never caught on. I never met anyone having one.

A funny side effect, similar to the US I believe, is that you need a driving license to buy booze.
The problem is running, possibly untrusted, code in isolation from the host in a convenient way. "Convenient way" is, of course, very subjective: in my case, it is doing as much as possible from the IDE (IntelliJ Idea). As a result, this means sandboxing graphical applications, and I'm not aware of a way to run a graphical application in a Linux container on MacOS.

IntelliJ has access to all downloaded packages (to provide autocompletion, etc.) and run npm/yarn/whatever's scripts/actions. This IDE has a lot of customized support for specific tools, which I find valuable, and wrapping everything in a shell script delegating work to a container means losing this support. At the same time, running IntelliJ as a native application, I'm able to open an embedded terminal and enumerate files in my home folder (with exceptions, like Documents and Downloads, but I'm not able to isolate projects from each other). I'm trying to keep all fancy stuff but isolate different projects from the host and each other.

As for yarn: npm is only an example. The same problem affects almost every package manager. NodeJS ecosystem is convenient here because nearly everybody has heard of some malicious JS package.
Project Euler is why I am a programmer - i spent many nights in university doing PE problems instead of studying and nothing in class gave me the visceral excitement like doing PE
Reference counting implies non deterministic frees. If you knew who the final owner of an object was, you wouldn't need reference counting.

While it is true that many (most?) GCs have STW sections, it's not at all clear that it is a bad tradeoff.
Did he not start the special by saying he owed Netflix one more special? I can understand him using his B material and making a Statement...... But only if he brings the A material next
You can (and probably should) reconcile your credit card purchases more than monthly - I used to do it weekly (every Friday) now it's semimonthly.
Algorithms that mimic biological evolution and learn through creative evolution
Although technically correct, Norway is for all intents and purposes a member of the EU. The main difference it accepts all EU laws without being able to vote on them.
In France you have to pay for a passport, not for an id card. Passport is really not a common thing to have when you don't travel outside of EU.

Most of my familly and friends i France do not have a passport.
What the problem with trees? They are trees, not cyclic graphs.
My current backup system involves having all my data on ZFS and then using sanoid for snapshots and syncoid for syncing those snapshots to my server that also runs ZFS. Would I gain anything significant from switching to something like Restic for backups?
This is 2021, where almost everyone creates a global problem, then makes money off of being the one to "mitigate the problem"... The people dedicated to not creating new problems, but trying genuinely to fix problems simply fail and/or run out of money are increasingly ignored because they don't have the biggest marketing budgets. Honesty isn't making money any more... A huge problem.

The absence of any real accountability, and admiration of hypocrisy, is what threatens us most heading into the future.
It's been more than a decade so I almost certainly oversimplified the problem.

But to give an approximate explanation: Subversion's model of how branches work is fundamentally different to git's model. In fact in a sense subversion doesn't have a concept of branches at all in its core data model. Subversion just gives you a directory tree with a linear history, and then makes it cheap to copy directories around. The recommended layout for a subversion repository looks something like this:

- /tags
- /tags/release-v1
- /tags/release-v2
- /branches
- /branches/my-feature-branch
- /trunk/...

If you want to create a branch you just copy your trunk directory to a new name under /branches. In order to reliably merge back & forth between branches or between a branch and trunk (which are just directories in the repository), you need more than just finding the diff between the latest state of each branch; you really need to know about the historical relationships between them: When the directory was created what was it copied from, what other merges have happened since then? But this information - at least "what merges have already been done" literally wasn't tracked until about subversion 1.5 (which was actually contemporaneous with a lot of the migrations of subversion to git, at least in my recollection).

Some references for you:

- The classic "svn book" about branching: https://svnbook.red-bean.com/en/1.7/svn.branchmerge.using.ht... - note the section at the bottom "The Key Concepts Behind Branching" which notes "First, Subversion has no internal concept of a branch—it knows only how to make copies. When you copy a directory, the resultant directory is only a “branch” because you attach that meaning to it."

- The subversion 1.5 release notes explanation of merge tracking: https://subversion.apache.org/docs/release-notes/1.5.html#me...

To try to place this in time, I was using subversion (and was pretty happy with it!) in 2007. By 2009 I was using git wherever I could. Of course, the widespread migration toward git throughout the open source ecosystem was spread over a lot more years than this. But hopefully that gives some context.
So just because 52% voted leave, you assume all of those who did, did it because they had something against Eastern European immigrants?

That's preposterous.

The funny and insanely ironic thing is, I know many Eastern European and other immigrants in the UK who became British citizens and also voted to leave just to thin out the competition they faced for jobs and real estate.

They had nothing against any nationality, but their narrow minded views and primitive survival instincts kicked in knowing there are many like them out there wanting to immigrate just as they did before and made them pull the ladder after them since they assumed that less immigration will give them more leverage in the future.

The irony is not lost on me, but people are rarely rational when voting and mostly do it on emotions.
Recently opened a SendGrid account on their $14.95 tier for a new project and found the shared IP blocked by MS domains (outlook.com, live.com, hotmail.com). MS servers confirmed the reason in the SMTP negotiaton as owed to the IP/provider.

We reported it to SendGrid and their only option was to upgrade to their $89.95 plan to get a dedicated IP. That plan comes with 100K monthly sends and we are nowhere near that.

So, the choice was to have a significant portion of important transactional emails, like registration, not go through or overpay for a plan that is wildly overmatched for us.

Email is hard, but this borders on unethical. Customers pay for and integrate a service that simply doesn't work as advertised. They make no offer to mitigate (e.g. change to a new shared IP). It's just "oh yeah, if you want the service to actually work reliably, you need to pay us 6X more".
"Too cheap to meter" == the investment does not pan out to the private sector. That's been the historical problem. No one wants to build a big fancy thing and thing run it at cost.

The reason fission is going for prefab is not only volume lowering costs, but selling gizmos for a profit that the buyer runs at cost does make sense.

(There are some interesting vaguely Marxian dynamics with high tech with minicsule operating costs that should always be considered. That we all drive cars and not ride trains is similar. The car industry surely involves 3+ orders of magnitude more people per mass * distance transported)
> Leibniz’s central argument was that all human thoughts, no matter how complex, are combinations of basic and fundamental concepts, in much the same way that sentences are combinations of words, and words combinations of letters. He believed that if he could find a way to symbolically represent these fundamental concepts and develop a method by which to combine them logically, then he would be able to generate new thoughts on demand.

To what extent did Leibniz impact Frege and the other architects of analytic philosophy? Isn't Begriffsschrift a similar project?
Pretty sure slaves didn't get money.
What Google did different than the rest back in the days was mostly relying on x86-32 with Linux and not so much RISC (SPARC) with Solaris. Sun's market share was huge back in those days.
It doesn't change anyhing, what's more convenient?
Right, I guess what I was more critical of wasn’t a hash confirmation of associated data — it’s more the trivial bypass of this when the key is compromised in the first place. Theoretically, a user doesn’t export their key, or if they do, it’s under a tightly controlled manner which limits surface area for exposure to only the source and destination. So in this scenario, the only way a private key is exposed is if one of the user’s devices is compromised, in which case the promise of associated data is meaningless.
They sure do [1].

[1] https://krebsonsecurity.com/2015/01/spreading-the-disease-an...
HN is too US-centered. Do you offer some services outside Nigeria?
Humans have a bit of irrationality that is based on their different POVs and experience. So the magic system is just that we have dynamic value systems. Shared culture through interconnected internet is making this less of a problem as the dynamic range is getting smaller or narrow enough to categorize
Your intuition is pretty close to the science: https://www.youtube.com/watch?v=BaDmSEVPZiM
You’re clearly experiencing a lot of deep emotions of mourning over the loss of someone you’ve known long before. I apologize for accusing you of not knowing the goons, though I would expect someone so familiar with the site would have known the times that Lowtax mocked a woman who experienced multiple miscarriages, or of other similar instances. You’re responding disproportionately to my comment that he leaves behind his children, which is a tragedy. I make no moral judgments here, nor do I have any relish towards his death. I am simply observing the tragedy.

But yes, it is not in my place to judge what someone might do in the depths of utmost irrational personal pain. It would be engaging in the same callousness that goons are infamous for. Perhaps the most appropriate response to this situation is neither demonize nor lionize this man, but to simply recognize him for what he was- a flawed man who nonetheless changed the world and the very internet itself.

I now understand that you have truly been deeply affected by this loss. I wish you may find peace in this difficult time, as he has. Go with God.
The mathematics of CS is mainly logic, for which Gödel isn't essentially the leading light. Very important theories he contributed, but they don't necessarily define logic. I'd be more inclined to attribute to Russell or any of his influencers (like Frege).
Here in California, the local landfill crushes the mixed-color glass and uses it as a cap on the day's waste to help keep things contained. It's an important function, and (IMO) a good use for the glass. I do believe that the sorted-clear glass is still valuable enough to be diverted back in to new production.
So Huawei was a national threat but Abu Dhabi owned company supplied chips on GPSs are business as usual. Its think it's probable (may not be the case) the whole 'security risk' think was a ploy to get them ousted at the behest of thier competition..
Counterpoint: when using a system with hybrid graphics which required me to use proprietary video drivers, switching to the latest Fedora version often brings issues with suspend, or random freezes, or lack of external HDMI output... After a few months, the release stabilizes and my issues disappear. But whenever I tried to be optimistic and jump to the latest release too soon, I got bitten by it and wasted hours trying to find workarounds.
I agree! Man I have had so many shitty leds but I’m really quite pleased with my Hue’s.
A reason SSH proliferation and lack of persistence matter so little is that that traditionally, SSH keys are used for transient session data authentication, encryption, and decryption, not for continued auth/decryption of PERSISTENT data.

In the case of SSH, if a key is lost or compromised, no big deal: create a new set of keys and distribute the public key(s) to system(s) for which you wish to authenticate to. There's also no need to use the same key for different remote systems --- you can use specific keys only for a specific remote system (making an adversary's task of determining what remote systems you connect to, based on public keys used on such systems if obtained, a bit harder).

The use-case for PGP was meant to be encrypting or authenticating (signing) data which would need to be accessible and/or validated from that point forward. If the sender's public key, or receipient's private key, are not available, valid, or uncompromised at some future time, then the data are either unreliable or unavailable.

Using SSH for more durable cryptographic transactions is convenient. But it also changes the use-case and environment around SSH. That will have side-effects.
Truly suprised not seeing burp mentioned anywhere in these comments. Super reliable, laptop friendly and with lots of Nice features.

https://github.com/grke/burp
Show HN: Students: my advice for industry-bound software undergrads
I think you're onto something there. As a practical matter, the cynical "IP is only for big corporations" is probably right. But that's just an extension of, "the courts are only for the rich". At least here in the US, aside from the occasional (OK, more than occasional) personal injury case undertaken by lawyers on contingency, getting "justice" through the courts is prohibitively expensive for at least 4/5ths of the public. Only the very top of that upper quintile has anything like the resources necessary to go up against anyone wealthier like SAP, Oracle or Google. So yeah, it is an unsafe world and most of us go out into it completely vulnerable. No how rugged an individual you are, you're going to get crushed. That's why extreme individualism is ultimately a dead end for all but the wealthiest (which is to say, the luckiest), few.
Botnets tests their capabilities all the time. This could have been a command and control test, a test to see what they could muster, or a demonstration.

When testing they seldom run for a long time.

Cloudflare's mitigation would've dropped in on the metals and still been visible to Cloudflare's monitoring... so the attackers stopped after a minute.
Interesting. So you're saying that they have to keep pedaling, just not very hard? My only experience is with the Lyft e-bikes, where high speed required actual work for me.
I feel like britain has this kind of weird mix between a really racist and xenophobic press / ruling elite, and an actually pretty open population. I'm english and I feel totally alienated by the way in which UK culture has changed in recent years, so I can absolutely see why somebody from the rest of europe would feel alienated, but I think under that media verneer, there's the country I grew up in, which is pretty multicultural to its core.
Some of the pain inflicted by async Rust is incidental, not
due to this GC choice. Pin is the biggest culprit.

Pin exists so that references captured in Futures may be implemented via raw pointers. This implies that a Future contains pointers to itself, hence Pin.

The cost of Pin is that it forces you to write unsafe code as a matter of course, the so-called pin-projections. [1] Look at the requirements for structural pinning: they are quite complicated.

References captured in Futures probably could have been implemented differently: base + offset, or relocations, or limit what can be captured, or always Box the state for a Future that captures a reference. Those would have avoided a GC and been even safer, since it wouldn't require unsafe code on the part of struct implementors.

1: https://doc.rust-lang.org/std/pin/#projections-and-structura...
Show HN: An NFT customizer on the Solana blockchain
>Minolta really feels like the underdog of classic camera brands

Hasselblad ;)
Are those people thriving now? Genuine question although I have a hunch as to the answer.

Never in history did it turn out to be true when poor people's problems were blamed on some minority. In every instance I can think of the results were disastrous for the minority as well as the poor who were pitted against them.
Antlr: A parser generator for reading, processing, structured text
Those zabatsu are by no means stagnant. Strong yen meant cheap investments for them overseas.

Their business empire grew N-fold, they just didn't grow in Japan, but the rest of Asia.

Find a name of any non-Chinese blue chip company from Asia, and there is good chance it has Japanese investors.
Matt stoller has written extensively on this topic, if it interests you.
I use syncoid to sync to a server that only has 1 open port, ssh, which only allows one user, and that non root user runs rbash and can only do zfs receive, not zfs destroy. Hopefully that stumps the ransomware people trying to delete backups.
Writing about Haskell is Hard
I feel like there's a balancing point though. I've used Gentoo, Arch, Ubuntu, Debian, Fedora, RHEL, SUSE, and CentOS. I've found the most stable and least problematic distro to be Gentoo. After that was Arch and then the rest basically sorting by average package age.

I think there needs to be a trade-off between bleeding edge and stability and I find that Gentoo tends to hit it on the head. I've yet to have the system break anything for me without explicitly warning me before hand, providing me a full mitigation & migration plan, and then requiring me to explicitly continue.

Arch has been pretty stable in the past but I've had problems come up numerous times due to the bleeding edge philosophy.

Point being that you should really only be going as bleeding edge as your community can reliably audit and provide support for. I think Arch toes that line most days and sometimes hops past the line. Gentoo however tends to stay a few steps back from the line and gets close to it but never actually steps over it. And then most other distros are sitting comfortably half a mile back.
The problem is, the population has expanded since then. Every new individual born is a new lawsuit vector. The scale of acceptable risk has been tipped towards higher safety standards, and I don't think we're putting that genie back in the bottle as the population on Earth continues to grow.
As I mentioned in another comment, most crushed mixed glass is used as landfill cap between the layers. It's not 'just' being trashed- the cap is an important function in modern waste management.
Too many hard working people have lost too much money because of this incredible media failure to simply call it a "simplistic narrative". See e.g. https://www.infosperber.ch/wirtschaft/konzerne/wirecard-gros...
Sure - I find this stuff super interesting and went from an open minded skeptic to cautiously optimistic (and have a positive long term view).

I think urbit’s approach to spam makes sense. Non-zero cost IDs (cheap) in the form of NFTs that grant network access and a pseudonym. This makes spam no longer economical because spammers can be trivially blocked. Pseudonyms also accrue reputation.

It basically moves auth and network complexity into the OS layer under an abstraction which makes application deployment way simpler. No distinction between a user and a server also fix a lot of the other broken things that cause federated systems to centralize or end up DOA to be avoided.

In the ETH world, decentralized state and the ability to incentivize network nodes and development via tokens and programmatic money make it possible to push back against the things that advantage centralization.

The issue is the protocols have to be good enough to solve a lot of this stuff, the old web didn’t do this well for the reasons you suggest and administering Linux servers is way too hard.

I understand the dismissal of technical people because crypto is filled with know-nothing scammers and gamblers, but it’s worth taking a closer look. There’s lots of interesting stuff happening in the space. A lot of people dismissed the web in the 90s too. There can be a bubble and a crash, but still be underlying tech there that will have a big impact.
Years back I did a couple hundred problems on this site. It's very good at making you learn about important results in basic math and algorithm complexity. It forces you to write your own library of efficient functions for factoring, etc... because you have to use them so many times and as the problems get harder anything brute force will take too long.
I assume that is for the benchmark to have accurate results and not for normal operation.
The article mentions that these were UDP attacks... which are usually reflections based on spoofed IP addresses. So who should Cloudflare contact? In the meantime another few hundred small attacks arrive. It's more constructive to improve the capability to mitigate attacks as they and other network providers have agency over that.
> Having the naivete

Regulative ideals do not constitute a claim of achieved solution. Approximation of an ideal result is already an achievement.
Portrait of a Lady on Fire. The ending made me hyperventilate and cry out loud.
"All disease begins in the gut" -- Hippocrates

It seems we just keep discovering more effects of the microbiome on health. I heard about this anti-inflammation effect just yesterday. I think it was explained as gram negative bacteria overgrowth in the gut (due to a bad bacterial balance). Those bacteria have a hard 'shell' that triggers a potent immune response (with inflammation) when present in the blood stream, which they enter from the small intestine.

So I think your advice to maximize fiber intake is sound. This feeds gut bacteria (unlike most other food which is broken down before reaching the small intestine). Another intervention would be fermented foods.
Nobody can answer this question unless you tell us what kind of concepts and libraries you are writing.

Sometimes Rust is handcuffs, sometimes it is guardrails, sometimes it is a rollercoaster track.

It is impossible to tell without more information. You and the other guys are asserting things with basically no knowledge of the other's context.
SAP is also a big conglomerate full of aquisitions that shouldn't be tainted with this...

In the 90's I worked at Seagate Software in Vancouver, BC, which made Crystal Reports (A million readers just either felt a wave of nostalgia or a shudder of disgust).

Seagate Software became Crystal Decisions, got acquired by Business Objects, which got acquired by SAP.

I wonder how much of the SAP work in Vancouver today is still on something related to Crystal Reports...