skysight-inc/HackerNews huggingface dataset:
I only see one that it avoids: domain names / URLs as import paths makes ownership much more clear, and slightly harder to achieve typo-squatting... sometimes. And I do very much like this part of go modules, it also helps decentralize the whole system a fair bit. I sincerely hope it becomes the dominant package-name strategy in time.

But lets pick another that seems on the surface pretty likely to be mitigated: source for downloaded-version X not matching version X repo's source, under "Malicious update" with cargo's `--allow-dirty`. After all, goproxy pulls from git repos directly, right? There's no --dirty flag or anything to push random garbage.

That's still a problem! Git tags are mutable, as are git repositories as a whole. You can absolutely tag a malicious version, get it into goproxy, and then change or remove the tag and any associated commits. The goproxy doesn't even store the SHA for correctly-tagged versions, only the code and a checksum of the code it saved, so finding the commit that it originally pointed to can be difficult or impossible. You can download the module and read the code from that, but that's true of any non-binary dependency system. You can't publish a change to an already-published version, but that's true of cargo too (afaik) as well as most package hosts (afaik), though goproxy takes a minor technical step further to make that accident-resistant (or at least easily detectable. which is great, everyone should do that).
I like WYSIWYG editing.
> Each keyholder has a smart card which has been sealed in its own tamper evident bag.

presumably this is kept in a locked cabinet, in a basement locked room, behind a sign "BEWARE OF THE LEOPARD"
Julia Evans' blog is my favorite technical blog. She has also written few posts on blogging / writing good articles:

1. Patterns in confusing explanations - https://jvns.ca/blog/confusing-explanations/

2. Blog about what you've struggled with - http://jvns.ca/blog/2021/05/24/blog-about-what-you-ve-strugg...

3. "advice" for aspiring tech bloggers - http://jvns.ca/blog/2016/05/22/how-do-you-write-blog-posts/
Many of your examples are variants on the same point: the cooperation of others. I contend that no you are not owed the cooperation of your employer, or other members of society, for absolutely anything. Interactions between free people should be strictly voluntary and consensual. This means if your employer wishes to cease employing you, he should be able to do so at his leisure. If he's breached a contract, you can sue for damages.

So yes, if your entire town decides to blackball you, that is an exercise of their freedom. If people decide not to sell you their property, that is likewise their choice. You are just as free as you have always been, no one is using force against you. They are simply refusing to cooperate with you.

In what world does forcing a person to employ another not an impingement of their freedom? Anyone who can use the threat of violence to compel participation is a master, and free people have no masters.

> Suppose you live in a society that makes collective decisions by voting

As long as these decisions cannot be enforced with physical violence then you are no less free by being excluded. Say I run a supper club which votes on where to eat next, are you less free by not being invited?

> If a group of people kill one of your neighbors for violating some extra-legal rule...

This entire paragraph describes corruption, which is inevitable, and does impact your freedom. No human process is immune.

> Is chattel slavery an imposition on the freedom of the slave, if physical violence is not used?

Chattel slavery is defined by the use of violence to confine the slave literally in chains. If the slave can just leave he's not very enslaved is he?

> there are plenty of restraints on your power to act and speak that do not involve violence

Most of these take the form of the threat of withholding cooperation. This is a perfectly legitimate threat to make in a free society, and one I contend has no bearing on your liberty. Living in a free society is merely agreeing to coexist peacefully, not that everyone must cooperate, or be the same team, or be immune from the consequences of failure. In fact, my reading of the article is that it means exactly the opposite - that people are free to cooperate or not as they see fit.
By the looks of it even the founders of AMP think that too... (Google doesn't promote AMP pages any more.)
Games aren't always for sale on Steam. Ghostbusters famously was only on sale on Steam for ~1 year due to licensing reasons (I think). I bought it and it's in my library and I can download and play it, but (currently) if you want to buy that particular Ghostbusters game, it's not available. TL;DR it's entirely possible GF2 was for sale on Steam at some point in the past.
Parameterized queries and statements are great. They solve problems where the paramaterized queries are used. However care must be taken, a script running on the database after information has been entered can still inject long after the initial parameterized statement put it into the database if that script itself does not use parameterized queries, making a SQL injection still work, in a delayed way.
> 2. No multiple package versions. If there is a version conflict between transitive dependencies of a package because of semver, you should not be able to install that package.

I think this depends highly on your environment. In npm land, where a typical project has hundreds or thousands of dependencies of dubious quality, this would be a nightmare. It guarantees that every single deployment will be different and risky.

This model works much better in linux, where packages are maintained by maintainers and there is not an explosion in the dependency network. Especially on a Debian or Centos box, you can be confident that upgrading packages won't break stuff.
Well maybe but also:

> The speed benefits Google marketed were also at least partly a result of Google’s
throttling. Google throttles the load time of non-AMP ads by giving them artificial one-second
delays in order to give Google AMP a “nice comparative boost.

Page 91: https://storage.courtlistener.com/recap/gov.uscourts.nysd.56...
> there is nothing inherently different between x = 2 and x = 10^30-40

Fermat begs to differ. :)
If I have some system in a quantum superposition state and I simultaneously measure it in n different ways, will all n measurements produce the same result?
There is, I think, some legal uncertainty about what it means for someone to be "identified indirectly", so a court might agree with you, but I think there is also a widely accepted opinion that if data can't be connected back to a specific natural person by the data controller/processor, then it is no longer "personal data".

Here's what the University College London's guidance[0] says:

"Once data is truly anonymised and individuals are no longer identifiable, the data will not fall within the scope of the GDPR and it becomes easier to use."

Obviously in the system I am proposing, the data controller/processor would have to deliberately not log the IP address or a user agent string. It's true that timestamps could give an idea of which timezone the user is in, but that shouldn't necessarily reveal even the country the user is in.

[0] https://www.ucl.ac.uk/data-protection/guidance-staff-student...
I had a great uncle and aunt who could not have children. They lived to their mid/late 80s. They were definitely not living a life without meaning. It definitely is possible. I saw it.
Given this, can you just hold up a flashlight right next to your head and look around the room for bright spots?
Have a mortgage and family
I see what you are saying. Yes, lots of assumptions and luck to get to this position to be able to do this for 7 years. Totally agreed.
I feel like that comment is that there is a difference between vocational training and classical liberal arts. It isn't that one is better than the other. But when vocational training is packaged at a college as though it is pure intellectualism, there is a disconnect between what was accomplished and what was promised.
Let's keep this trend going!
Who says Film Photography is Dead?
Nobody spends much time on their deathbed talking about how much money they made. Though, while money maybe can't buy happiness, having too little of it isn't great either.

I guess I'd try and project out lines for what happiness and financial security look like for both choices, over a couple of decades. Keeping in mind that you can jump onto the other line now, or 5/10/20/etc years from now.
Adding to what bradlys has written.

If we can fix the system, then no 'hopelessness' may anymore be involved. That's what we need to push for. As of now, the system for broken marriages is hopelessly bad.

My advice to all would be that even when in a good marriage, to the extent you can, don't make choices that would make the end of it hopeless for you.
CollapseOS is a z80-based forth that is targeted at bootstrapping computing from scavengable components in old electronics.

https://collapseos.org/
The tech megacorps are kind of an exception to this. They've got enough money to pay double what you'd get at another company and then put you on whatever dreadful project they couldn't get anyone else to work on. That's an "interesting challenge" I suppose but not the kind most people mean.
Now This: The NFT Bay
Do you not eat out? Most restaurants of all caliber use that garbage.

I know I'm still consuming it when I eat in a restaurant. Best you can currently do is just not buy it for home use.
I know a woman who discovered a hidden camera in the female toilet at work disguised as some kind of utility hook on the door. Cheap to buy on amazon!! The SD card inside had pictures of the company owner's desk but not an actual picture of him. The police declined to prosecute because of lack of evidence.
These are two buzzwords that I still, for whatever reason, feel no momentum for.
In the abstract, what I'm wishing for is definitely possible at least for some subset of packages.

• Source code packages are cryptographically signed by at least one and ideally several identities which are verifiable via a web of trust.

• Packages are associated with a public repository base URL known to the package manager and that base URL doesn't change without setting off alarm bells.

• The source code of a package can be traced back and cryptographically connected to a public commit history at the public repository URL.
It can be argued that the separation of powers and systems of checks and balances defined in the US Constitution help to ensure that no single person or group holds too much power over the American people:

https://en.wikipedia.org/wiki/Separation_of_powers_under_the...
if this helps saving orangutans in borneo, i welcome it
Statement from developer: https://gist.github.com/ghuntley/9261d469bc7b0e10789538ddd36...
We did a data analytics project for a upper class furniture manufacturer and I was really surprised to hear that they typically cannot afford buying A grade leather because the car industry actually stocks everything. Due to their processing requirements car manufacturers can hardly work around natural defects. The absurdity they said is that the leather in cars is coated below so many layers of plastic coating that it hardly had any properties of real leather anymore. Large hides of high quality leather seem to be actually a serious business rather than a waste product from what I heard.
I don't think the US is a good comparison.

The amount of "mindbending messed up"/"distropian" stuff the US has from a European point of view is absurd.
Cerebras SDK Introduced for Programming the Largest Chip in the World [video]
I think the federation in fediverse went on wrong tracks. What I want is a single identity and be able to use it everywhere, whether the "where" provides me with a photo sharing service or a blogging service. What we have instead is a photo sharing service where I'm registered and a blogging service where I'm also registered but with a different identity, and we try to make the two fit into one another but it doesn't really match.
Realistic galaxy image simulation via score-based generative models
Why are you assuming they tried to read it in one sitting? Nothing remotely suggests that in the comment thread. All we know is that they read 30 papers sometime within the last two years or so. You chose a perspective, and just reinforced it, that they were incapable of extracting anything useful from reading those papers, which is insulting. It could be that they read a paper every couple of days, or perhaps when they became available. For some reason, it seems you've already decided that they're incompetent.
Whether it's broken or not is up to you, but that's what freedom means. All I'm suggesting is that people acknowledge that they are indeed attempting curtail our freedoms (ie. enslave us) even to a minutely limited degree, in order to accomplish their vision of good.

This moves the conversation forward, because the next question is how do we know your vision of good is the right one, worthy of the requisite sacrifice of our liberty? Is it really worthwhile to enslave the competent and the fortunate in order to maintain the incapable and unfortunate?
Great post, but can I suggest a three-way distinction, instead of two-way:

1. People who need to engage in wage labor in order to survive.

2. People who can deploy resources essentially at will to meet essentially arbitrary goals. This means buying stuff, capital investment, etc. etc., with the limits significantly beyond what (say) a 10x median income person might be able to manage.

3. People for whom neither 1 nor 2 is true.

I don't think we have a great term to describe the third category. Simply by not needing to engage in wage labor, such people are in many ways "wealthy". But lots of the connotations of "wealthy" are related to the second category, and they don't have these abilities either.
I'm not sure if that is relevant to this particular issue, but the history is fascinating. Not everyone gets excited about fertilizer chemistry but when Nixon went to China and opened up trade, the very first major industrial projects were the construction of massive ammonia fertilizer plants across China, built with American technology (*well German technology from the 1900's more accurately, just updated). This ended the famine cycle in China [1]:

> The removal of the limits to agricultural growth and China’s industrialization came in the immediate aftermath of US President Nixon’s historic 1972 visit to China. The first commercial deal signed immediately after the visit was China’s order for thirteen of the world’s largest synthetic ammonia complexes for producing nitrogen-based chemical fertilizer. China purchased additional plants in the 1970s, developed its own capacity to build chemical fertilizer plants in the 1980s, became more or less self-sufficient in the 1990s, and began exporting chemical fertilizer by the turn of the new millennium.

[1] https://chinadialogue.net/en/food/9279-modern-china-s-agricu...

Now is a rigidly authoritarian state necessary for this kind of technological development? Err... no.
> I think that it is a slippery slope downwards criticizing different cultures and legal systems.

On the contrary, I think this is essential. As an American, I'll note that criticizing our government is a national past-time. One that even extends beyond our country and others join in. It's important to remember we live in a democracy (don't detract by saying we live in a democratically elected republic). We perform checks and balances on our government. The government is flexible. We can learn from the good and bad from other countries and ourselves (specifically what works in states run by different parties and economies). This is great.

We also need to criticize governments and societies that are violating human rights. This cannot be ignored just because they are not seen as culturally okay by someone else.

What I think is the problem is the comparison. The "America is the greatest at everything." But also the other countries that criticize America but then ignore their own similar issues, just shifting focus. We have to criticize ourselves, but use it as a means to move forward. It can't ever be "x is bad and that's the end of the conversation." It's about a "more perfect union" than "a perfect union" because we have to constantly be improving and adapting to the changes in the world. The danger is being static and thinking what worked before or what works somewhere else automatically works else{when,where}.

The whole problem is that now we just complain and the conversations lack nuance. I'm not sure if they ever had nuance, but I do know that it is important if we're to progress from where we are now.
Yeah, I have some questions too. Even at a rate of 150k/yr, while today that seems within the reach of many north american senior level devs, 7 years ago that was tippity top percentile pay, so it's not exactly something that anyone could've done, literally by definition.

One other thing that isn't mentioned either is market ups and downs. If your nest egg started at the bottom of the subprime crisis, that's a very very different timing prospect than if you had significant equity that lost value in the late aughts.

And lastly, is 1M in liquid assets even considered "wealthy" these days? "Well-off", maybe, perhaps even "rich", but "wealthy" in my mind means "bentleys and yatches are pocket change".
He meant that after reading it, it was unclear that it was actually a legal license that would stand up in a court of law. It's just too confusingly written. See Nelson Minar's comment at the end of this: https://web.archive.org/web/20081015194558/http://radar.orei...

Every IP lawyer I've talked to since has looked at GPL and said something pretty similar. "It's just too confusingly worded to understand as a defensible license"
Agreed! There's also https://p5js.org/
None of my jobs after college have been actually "making the product." All of them have been "making things which enable the product to be made."

Maybe it's just the things I like to do don't lend themselves to actual products but instead are the shoulders which others often need to stand on to actually make products. But I don't think I've ever worked in a company where the main product was something I am passionate about, but all my jobs have been jobs I've been passionate about (at least at the beginning of each job).

If the job offers you're getting are to do interesting things to help make boring products, take it! Learn and do the interesting parts that you like.
Finally I can start working on Lemmy again without feeling a moral weight in my gut.

Great move on the part of the creators of Lemmy. I know this was a hard thing for them to do, because I know how much they were opposed to removing the filter, but I think this will be a very good thing for Lemmy in the future.
I don't understand the hate for this company. YC has funded multiple such aggregators (see Moonshot Brands) and I don't see any negative complaints about those.
Also: https://twitter.com/ariadneconill/status/1457787938683580425
Since Jurassic-1 is behind their API just like GPT-3, why do you think AI21 will not clamp down just as much as OA?
William King: CTO Subspace: AMA about the Internet
> I also like to not create an account because I enjoy non-profiled search. I dislike getting served the same mush over and over.

You can disable Google's activity history, which includes YouTube videos watched. That should prevent personalised recommendations: https://myaccount.google.com/data-and-privacy

I disabled everything and can confirm that I only get garbage recommendations about things I've never watched or searched for.
No, I have ibuprofen for when I have a headache lasting more than a day. (It's caffeine... every ... time.)
Isn't it technically against?

Who cares if it is
Google also has some legal docs with unredacted statements about AMP that went public. So, more reasons to not talk about it.
It is telling that most of the complaints on org-mode seem to be from folks that haven't used it. And never intend to use it. Mainly because of emacs.

Which is a shame. I think Jupyter mainly steals a ton of market from Mathematica and Matlab, without most of it's users ever having seen those offerings. Org has the advantage that it is not tied to any specific extension language. It is all a cdata style delimited text block with contacts on environment setup and tear down. With the output being fair have for editing.
> Forth has an "inner interpreter" called NEXT

I can't find any reference to this in ANS Forth 1994, other than appendix C. 3 Hardware Implementations of Forth which says: "In the mid-1980’s Zilog developed the z8800 (Super8) which offered ENTER (nest), EXIT (unnest) and NEXT in microcode." (which is interesting, by the way).
I guess specialized equipment isn't really the analogue for most software. Most software is a bit like a hammer - a generic tool with worldwide application.

I can see the closed-source approach working for really complicated subdomains (like a geometrical constraint solver) where you really can't fix it unless you're immersed in the relevant maths - but that's just not what most software is, or where most bugs lie.

Another thing is, how many of the machines in any given factory are that specialized? My dad works in a factory with a bunch of different machines, and only in a couple of cases would it make sense to call an engineer if they broke down, because most of the machines are pretty straightforward. Is that just warping my expectations?
I Became Obsessed with Accidental Time Travel
The web is awash with ordinary peoples’ stories of “time slips.” Their real magic is what they can tell us about our relationship to time.
I agree, brief descriptions like sound vague and empty. So let me support my claims: EasyMorph is easier for non-technical people because unlike with PowerQuery all of its functionality is available without coding. Also, EasyMorph is more powerful than PowerQuery, because it has a bigger library of available data transformations, for instance, interval merge (a join where a key value must fall in a range specified by two fields), fuzzy matching, binning, de-aggregation (breaking down a total), or replacing substrings using a lookup table.

In terms of programming, EasyMorph is basically a high-level functional programming language (but entirely visual) with immutability, pipelining, automatic parallelization and concurrency. It allows arranging loops similar to FOR..NEXT, FOR..EACH, DO..WHILE/UNTIL loops in programming languages. It has subroutines, conditional IF/THEN/ELSE branching, exceptions, mutexes, and a built-in key-value storage.

Besides that, it combines data preparation with no-code automation because it has many so called external actions for exporting to/updating databases, sending low-level HTTP requests to web APIs, performing file operations (download, rename, delete, clone, zip, unzip, etc.), running external applications, and even executing SSH commands on remote machines. The full list of capabilities is rather extensive to list in one post and can be found here: https://easymorph.com/all-integrations.html.

Finally, EasyMorph is just faster due to its in-memory columnar engine with several tiers of data compression and aggressive optimizations that leverage CPU cache. We regularly see customers that switch from PowerQuery because EasyMorph is 1-2 orders of magnitude faster.

At the same time, EasyMorph is 5 times less expensive than Alteryx and has a very generous (as our users say) time-unlimited, data volume-unlimited free edition.

We're entirely bootstrapped, profitable, and almost double our revenue every year for the last several years.
4) distribution madness

5) lack of userland backwards compatibility

6) poor commercial application support...
You're thinking about helicity, not chirality:

https://en.wikipedia.org/wiki/Neutrino#Chirality
It's a distraction. The existing tool works good enough, and they have other more important things to do than learn a new tool.