skysight-inc/HackerNews huggingface dataset:
> why can't Visual Studio compile to something that works by default on the Windows of the target audience without requiring them to install those additional DLLs?

Not without a time machine; the problem is that you can target older versions of windows with newer versions of Visual Studio. When Microsoft produces vc_redist_2022.exe they can put it Windows 11, but how do they put it in the 2018 version of Windows 10?

The arrival of the Windows Store raises the possibility of automatically installing dependencies. You can also create an "unpackaged" app that uses the WinRT APIs without being a Windows Store app distributed through the store, but if you do that you're exposed to all the horrific machinery yourself as a developer: https://docs.microsoft.com/en-us/windows/apps/windows-app-sd...

In re static linking: I haven't checked but I suspect that COM is involved somewhere. Does anyone have a good summary of what's actually _in_ the redistributable?
“I don't trust the ledger to accurately reflect ownership (it can only represent possession, not true ownership).”

Possession is ownership on the Bitcoin network. Not ownership in the sense of it is written down in some legal document somewhere but ownership in the sense that you have the power to perform a transaction with what you say you own.

You were trusting a central party all along. If you didn’t you wouldn’t be in the position you are in.
When I understood the blockchain and proof of work, my first reaction was - this is nuts. It's a waste of computing power and electricity all for removing a trust provider. And immediately the next realisation was that making a blockchain private and removing proof of work made it pointless.

Blockchain is a solution for nothing.
The Taiwanese gov't was deeply involved in TSMC from its inception in the 80's to what it is today. I'm guessing it's in their best economic, geopolitical interest to keep things in Taiwan as much as possible.
The #1 result NordVPN had servers hacked to root and then attempted to covered up the huge security breach rather than disclose it. [1] Not to mention their concealed relationship with Tesonet, a shadowy data mining company. On top of that, key personnel of Tesonet (including the CEO) are stationed in Lithuania, which has a "cozy" relationship with the CIA, which extends as far as knowingly hosting rendition sites there.

Isn't this an immediate disqualification of the site's methodology?

[1] https://en.wikipedia.org/wiki/NordVPN#Criticism
Bittorrent and Napster took advantage of post-scarcity space created by the information age and made distribution of non-scarce resources easier. NFTs, at best, do the opposite by intentionally trying to force scarcity back into a post-scarcity system. For this reason, I do not believe they have value or much of a future.
> I’m surprised you don’t think it’s important for power to be accountable.

You're just making shit up now with no relation to what I'm writing. I don't waste my time on bad faith.
My bad, I inferred that as less humorous and more condescending when I shouldn't have.
> x11 does not have a security model - any client can observe and manipulate any other client

This hasn't been the case for decades. X has the ability to isolate clients and/or only allow partial access to other clients. For example try this:

$ xauth -f lockthisout generate :0 . untrusted
$ XAUTHORITY=lockthisout xterm

The first line generates a new X authority file with a single entry that causes the display :0 to be untrusted. Then whatever runs inside xterm (or whatever you launch) will be considered as untrusted, e.g. you wont be able to run any OpenGL application or xdotool (it actually crashes after saying the XTEST extension isn't available, i guess it can't handle that case).

Note that this can be worked around by running "export XAUTHORITY=~/.Xauthority" since pretty much everything uses ~/.Xauthority for the local user (which is connected as trusted). This one can also be addressed by storing the session X authority file somewhere else (AFAIK some distros generate a new randomly named one for every session), or you could use something like AppArmor or SELinux to restrict the untrusted application's access to the session's X authority file. Or just run it as a different user who is always untrusted, though that can be inconvenient for some types of applications.

That said there are some issues, mainly because the whole X security functionality hasn't seen much attention in recent years. For example an untrusted client can't use 3D accelerated graphics but you may actually want to run a 3D app while not giving it access to everything else. Though that isn't due to some inherent limitation of X or whatever, just that since it never gained much attention (since the entire GUI sandboxing thing was never much of a priority) nobody bothered to work that part out.

In the future it might just be better for X desktop to be running untrusted applications under a Wayland "pseudocompositor" that simply lets X handle the actual window management (current Wayland compositors that can run under X create a window and treat it as a display which isn't exactly nice from a UX perspective and doesn't allow -trusted- X programs like xdotool work with Wayland windows).
Just ban all financial institutions from facilitating crypto crap purchases. It will be immediately worthless
because adb(1) did it that way.
The pendulum swings back and forth similar to how politics have shifting tides that ebb and flow.
My impression of desperation from Facebook is admittedly anecdotal, but it's based on just how aggressive their recruiters currently are about repeatedly contacting people who have previously turned them down vs. the others. It's not really that they're that different from e.g. Google, more as an illustration of how tough the London market conditions can be even with deeper pockets than most startups.
Hi, please read the HN comment guidelines. [1]

Specifically, "When disagreeing, please reply to the argument instead of calling names."

[1] https://news.ycombinator.com/newsguidelines.html
I'll tell you what is the other option: Digging through the code and extracting the information without accepting the blood contract, because people who are stupid enough to put something in the public sphere on the internet don't deserve respect when they treat their visitors with only one viable alternative.
> I've chosen my products and network firewall rules carefully.

This seems like a lot of effort, and I've tried to do it. But even for some products that claim to never phone home, or transmit data outside the network, sales people have lied to me and then I have to go through the hassle of returning the product.

To me, it seems like there is either 0 effort for 0 smart home automation, or lots of effort for any smart home automation, privacy being equal.
We’re moving fabs to the West to defuse a potential hostage situation where China strangles the global supply of semiconductors.

The UFO releases are either about telling China that we are aware of and can track their surveillance assets, showing China our new highly advanced classified assets, or else demonstrating the superiority of our current Air Force assets.

Both activities serve to dissuade the Chinese military from taking aggressive actions.
Did you have an office in Longwood FL, near Sabal Point in the 80s?

If so, I fondly remember dumpster diving into your trash dumpster w other neighborhood kids in search of games or whatever.
Not really sure how this is relevant, seeing how the original comment said

> what hope is that for regular folks could make safe use of said value store
Crypto is libertarianism-as-code: it promises freedom for all, even from the state (or "cathedral" in Moldbugese), but it's really an unworkable scam whose actual effect is to enrich the founders and the investor elite at the expense of everyone else. Oh, and as a side effect, it contributes to destroying the environment while its proponents tell us this is a good thing.
At least on the hardware side of things, it's an Electrical or Computer Engineering degree, usually with at least a Masters
That's code copied from the linked gist. But, it omits some key lines in the middle, and does not actually overflow:

DWORD required_length;
auto rc = RegQueryValueExW(key, version, NULL, NULL, NULL, &required_length);
if (rc != 0) return NULL;

DWORD length = required_length + 2; // The +2 is for the maybe optional zero later on. Probably we are over-allocating.
wchar_t *value = (wchar_t *)malloc(length);
if (!value) return NULL;

rc = RegQueryValueExW(key, version, NULL, NULL, (LPBYTE)value, &length); // We know that version is zero-terminated...
if (rc != 0) return NULL;

// The documentation says that if the string for some reason was not stored
// with zero-termination, we need to manually terminate it. Sigh!!

if (value[length]) {
value[length+1] = 0;
}

`length` starts at 2 greater than naively needed, then is updated to the real value (again, always 2 less I guess).
Yes sure, everyone knows that librarians hide books with which they disagree, because, since Socrates, their only goal is to corrupt the young, the innocent and the virgins.
LOL You don't look very familiar with libraries and books.
Scott Adams wrote a simple interpreter which could be implemented in BASIC or Assembly Language for his games.

https://6502disassembly.com/a2-scott-adams/interp.html

This was like the Infocom interpreter (e.g. "Zork") but more specialized to writing games.
Why should I trust this in any way?
Most of these libraries are either quite low level, or more GUI-oriented. They usually don't include mid-level decent system management utilities, like registering your app as a service, or checking if the network is up.

In general, when there are is some useful and commonly used C SDK , common FFI wrappers in any language quickly appear and become popular.
Then I can say that I've done my research and I think it's reasonable that USD won't remain global reserve currency forever and that it's replacement won't be a governmental currency, but a decentralized one and Bitcoin would be the only reasonable candidate.

Does this mean that I'm not speculating all of a sudden because I've done research and came up with a reasonable forecast?
Why do programmers like cats so much?
> the "Let's build a Fab in the USA" train

We have fabs in the USA right now. To speak of Austin alone, Samsung's own S2 has been here since the late 90s, and there are a handful of others here, too.
I'm aware of technical debt and it's consequences. The point is that the vast majority of developers treat their job as creating good software, when it's absolutely not.
You know they recovered 150000 Bitcoin from a cold wallet and are going to repay holders?
I bet some part of the US government has something to do with all these things. It's just we will never know until the change of tide.

Reference: Propaganda Due was not exposed until the end of the cold war.
Doesn't help you when what you need is MSVCRT.
"Any application that could be done on a blockchain could be better done on a centralized database."

The scientific community will disagree with this. The whole culture of independent peer review process assumes there is no centralized control over scientific conclusions, whose rigor stems from decentralized feedback. The time when centralized database (source of truth) became the basis of mainstream science was during the dark ages.
"Stop overengineering" was the excuse I heard back on a rough project when I insisted we add logging beyond just the returned HTTP status code to our service before shipping to 200M+ people. But that would take an extra week or two in the current system and that's just too much investment for some silly over engineering.

Had we gotten decent logging in place early, we could have saved a terrible change that got passed our canary rings, which got us called to see the CEO and made news.

So, I learned early that "overengineering" can also be a management excuse for cutting corners that shouldn't be cut.
More and more remote companies use PEOs. No need to incorporate in 50 states, you just pay someone else to.
> vswhere is included with the installer as of Visual Studio 2017 version 15.2 and later, and can be found at the following location: %ProgramFiles(x86)%\Microsoft Visual Studio\Installer\vswhere.exe

The irony is that there is absolutely no guarantee that this path is stable so in 2025 I'm sure there will be a wherevswhere.exe
Ikaros
Yes - this is not really a Docker thing but a Linux kernel thing, although client-side support is of course needed from Docker and any other system that uses cgroups/namespaces. Also, one other thing to know is from the kernel's point of view "root" is not a thing. It has been unbundled into a set of capabilities (https://man7.org/linux/man-pages/man7/capabilities.7.html). When you launch a container, you specify which capabilities you want to drop (so even root in the container can't have them), and which UID mapping you want to use.
Emacs can be described as an interactive, lisp-based environment for building textual UIs (TUIs). It's very easy to extend it with arbitrary, dynamic behaviours, including ones that need to collect information from the user.

As a trivial example, let's say for some reason I keep needing to generate the sha256 hash of a password and add it to the current file. I could add this to my .emacs:

(defun my-insert-password-hash (password)
(interactive "MPassword: ")
(insert (secure-hash 'sha256 password)))

(global-set-key (kbd "C-c p h") 'my-insert-password-hash)

Now if I hit Ctrl-C followed by p then h I will be prompted for a password in the minibuffer and the hash of the string I provide will be added where my cursor is. I didn't need to write any GUI code.

This kind of user interaction can equally easily allow the user to select from lists of dynamically determined options, including very large ones (with nice fuzzy matching menus if you use ivy, helm or similar). It's also trivial to write functions that prompt for several pieces of information, ask for different information depending on context, etc.

In the case of LSP, the server only has to provide information about what options are available and what possible responses are permitted. It's easy for emacs to dynamically provide the corresponding UI.
Reminder that if you only need 1 specific location you need to appear in, you can get a VPS for less than a monthly VPN subscription.

These VPS, while still distinguishable from normal residential connnections, are more likely to pass filters etc, it won't also trip up IP-change-detection mechanisms as you'll get an stable IP address.
In your last example I think only the gun is the problem. Even if the kid started a club for socialists and wanted to read the communist manifesto as part of their book club that should be allowed.
They just steal the IP anyways
Please forgive my lack of familiarity with PCI express hardware, but I have a question:

All those PCI express devices are all sharing the single v2 lane? Is the PCI express bus a network?
I firmly believe that at this moment, Home Assistant is the best smart home system out there. No cloud, no vendor lock-in, no data, no profiling, no lock-in with licenses and companies needing to make deals.

And honestly, that's terrible. Because let's be honest, Home Assistant still kind of sucks. Not because of all the hard work the developers put into it, but because all of the hacks they need to get devices to work with the damn thing. The IKEA smart lamp bridge is unreliable, wake on LAN is unreliable, smart switches refuse to operate without a cloud connection, transmitted data formats are proprietary and unreliable, it all just sucks so bad.

There's work being done by FAANG (or would that be MAANG now?) to make interoperability between devices better, but knowing these companies that probably means the clouds get more integrated with each other.

These terrible internet smart devices should pick a protocol like MQTT or CoAP or whatever IoT protocol they fancy, and stick it proudly on the box. They can have their stupid internet uplink, bht they should Just Work if they're only connected locally. These things run fully fledged ESP32 chips with more power than you could ever need for a plant humidity sensor, just put a basic web interface on them that takes a password, a WiFi network and an endpoint to talk to. As for alternative protocols, companies like Phillips and IKEA should get their shit together already and just expose a good, documented API.

Home Automation is a hobby mostly practiced by the technically inclined. The more bridges and products that work with your smart fridge, the more value your fridge has to consumers.
I use both Windows and Linux on a regular basis, and I have to say that font rendering on Linux is almost always much better than on Windows. I frequently notice and am bothered by font rendering on Windows, even after running the ClearType tuning tool on both of my monitors.
tangentially related bit of trivium... when i was house hunting a looked at a house across from a fire station, and upon doing research about what it's like to live across from one, found that a.) they tend not to blast sirens upon exiting the station, in contrast to living near a hospital with an ED, and b.) the power grid segments that fire stations are on have priority and are less likely to lose power during blackouts.
> Is this based on anything serious? The problem is greenhouse gas emission into the atmosphere, not extraction of chemicals containing carbon from the ground.

If a large portion of carbon greenhouse gas emission is from burning of extracted chemicals, and a large portion of extracted chemicals are burned it seems to me simply taxing the chemical extraction itself is a good start, as it is simple to implement. I agree that taxing exactly at the point where emission occurs is ideal, but if that's too complicated to do right away starting with something simpler with a similar result is a good idea.
Pointers, Pointers Everywhere
We actually want to have it work natively together, but just can't find the time to implement it. But the team is growing, so we'll definitely have something here soon! :)
When it comes to crypto I am completely uninformed. In my uninformed opinion, I think there is probably something of value in crypto and the blockchain but I can't see it under the intense amount of bullshit the crypto community comes up with and I am not willing to dig through that mountain.
Where did you play it, and on what system? There might be people here who would recognize it. Another good place to ask is https://retrocomputing.stackexchange.com/
No one in the thread has mentioned "overthrowing a state" except for you.
Part of the 'great resignation' is mothers forced to leave their jobs
I think a lot of discussions around the utility of blockchains misses (or just ignores) a really subtle but important point: smart contract networks (like Ethereum) could be thought of like public utilities that are implemented via markets. And I think that perspective can unlock a lot of innovation.

If I want to launch a startup, I have to cover hosting costs, manage infrastructure (terraform, AWS/DigitalOcean, Docker, DNS, etc) and handle lots of other complexity that is incidental to what I'm actually trying to build. It really helps to have VC money to ease that pain - but VC money is a dangerous train to get on.

But if I can build my app using smart contracts, then they are always available to execute when needed - just pay to write/execute. I don't need to cover hosting costs or much infrastructure beyond some web interface (which I could just put on Netlify). That simplicity reduces the need for funding.

Any data or infrastructure that I put in place is - by default - still available if my startup fails, so users who put their content into the system can still get access to it even if I can't afford to pay the bills anymore.

And of course, other startups could immediately build on top of whatever I've created.

Honestly, using blockchains for money - while essential for some of this - is not the most interesting application.
Now do the same in Java and it will be as fast, if not faster. The point is the benchmark is looking at GC performance. In large real world programs, it is not trivial to make such changes.
> Solana’s consensus protocol isn’t responsible for its performance, it’s the fact that they mandate higher performing machine SKUs and at least 500Mbs (recommending 1Gbs) internet speeds.

While it's true that Solana nodes have higher requirements than Ethereum full nodes (though not sure about validators?) I think it's incorrect to say that Solana's consensus protocol is not responsible for the high performance performance. Solana's consensus protocol (Tower BFT) works tightly with Proof of History. These two elements coupled together allow that the validator leader can be rotated asynchronously allowing performance increases in block propagation, throughput and ledger storage. Have you really had a good read of how Solana works? For eg. Sealevel allows for parallel contract execution, something which to my knowledge no other chain is capable of. All these innovations combined with the higher node requirements allow for TPS that no other chain is even close to and the Ethereum Modular vision will not achieve for quite some time (assuming it works).

> They also had to largely centralizing and have around 1000 validators.

Not sure what you're pointing to here. There was 600 validators a few months ago. Now there is 1000. 2000 additional validators are on devnet and would likely go onto mainnet in the coming months. How else should a blockchain decentralize then to add additional validators and try and spread the delegated stake around to reduce the number of nodes required to halt the network?

The fact that Solana went down for 17 hours not too long ago and there was nothing Solana labs could do to bring it back shows the validators are not run by themselves.

> Ethereum’s fees and performance are due to a push for decentralization instead of cranking up the max gas per block to a level that wouldn’t be feasible for someone at home to run a node.

Ethereum's fees are due to its wild success + it's very low TPS on the L1 because it was more or less the first of its kind. Subsequent chains like Solana have made thousands of small or large alternative engineering decisions that in sum allow for much higher throughput and lower fees. Solana doesn't use gas, perhaps you're thinking of BSC or AVAX?
Rusty dusty equipment that probably won't even fire.. that offensive line is hardly a major threat
The problem with bank accounts is the banks. The promise of crypto is that you don't need to trust any institution, such as a bank, to keep track of your money.
What's a question you've always wanted to be asked?
I couldn’t find the headline/title anywhere in the slides. Where is that from?
"self-automated bug bounties" is my new favourite phrase.
That's not accurate today. It might be different in 10 years, depending on how successful China is at becoming self-sufficient in semiconductor design and manufacturing.

Global companies didn't just outsource all the work to China. Even in the 90s, they were aware of the risk/reward, and specifically retained high-value, low-headcount/capital work outside of China.

As a result, China makes most of a device, but many core components are imported.

https://www.nasdaq.com/articles/huawei-revenue-slides-in-q3-...
I have programmed Java/Kotlin/TypeScript for 5+ years in terminal/vim.
Then for 3 years in Eclipse.
Then for 8 years in Intellij IDEA.

I would never go back to VIM for coding.
Some years ago a Dutch teen bought a house with $100k money from stolen bitcoin. He was caught and arrested because he couldn't justify the money.

You also need to worry about algos that 10 years from now will analyze bank transfers, purchases ...