skysight-inc/HackerNews huggingface dataset:
> How do you figure? What kinds of guarantees?

Any, but specifically around security (almost all security is provided by certain preconditions being met, namely that method foo() is called only immediately after ensuring that method bar() returns true, or that an object of type Baz is always initialised in a certain way.

Prior to modules, the meaning of any line of Java code anywhere -- including in the JDK itself -- was subject to change by any other line of code in any loaded library through various kinds of monkey patching. You could not guarantee anything. With modules, if `foo` is private, and the only call to it is in `if (bar()) foo();` you can guarantee that foo is only called when bar is true.

Now, strong encapsulation isn't airtight yet, and there are still some loopholes left to let straggler libraries catch up or because there aren't replacements to some unsafe operations yet, but it will be very soon.

> There's a good chance that most of the programs broken by modules would never have broken otherwise.

First, almost all problems migrating to 9+ were because of such non-portable code, and the disruption was quite significant, and the rate of internal change is increasing. Second, this makes it happen now instead of happening, perhaps on a smaller scale, at each and every release for the next decades.
It also has a gray market problem.

I ordered a webcam on Amazon, some time ago. Amazon had it listed as “official,” and had a link to the manufacturer’s store page at the top. It was a “Fulfilled by Amazon” product, which should have told me that it wasn’t actually coming from the manufacturer, as the listing led me to believe.

However, when I received the device, it was the Chinese version (gray market), with a fairly crude sticker on the box, claiming that it was the US version (it wasn’t), even though all the packaging was Chinese. After I returned it for a refund, I attempted to write a review on the page, warning of the scam, complete with a photo of the sticker, and the review was rejected by Amazon. They completely ignored my reports. As far as I know, the item is still listed, with hundreds of positive reviews (I just checked -it is).

It’s fairly obvious that Amazon is directly and knowingly working with sketchy vendors, and actively suppressing attempts to expose these practices. I’m wondering if there’s a bottom to this. I think it would take a fairly aggressive effort, by multiple governments, to stop it, and I suspect the will is not there. There’s probably a lot of money being made, and many people would be perfectly happy with the gray market device (until they try to upgrade it, or get it fixed).

I did let the manufacturer know (when I ordered the real device, directly from them). I saw many complaints on the manufacturer’s support site about the same exact issue (which is why gray markets are such a brand-damaging problem). I would not be surprised if the manufacturer was afraid to do anything about it, as Amazon is an 800lb gorilla.
In Praise of Ponzis
Tom Holland Clarifies Nature of Marvel and Sony Spider-Man Contract
Tom Holland set the record straight on his ongoing Spider-Man contract between Marvel and Sony. Following the release of Spider-Man: Far From Home
Only if you're willing to pick up the responsibility for hosting/downloading CP for example...
Change the license. Make it so that large companies have to pay, and small companies can still use it for free.
> until you accidentally unleash a lot of output at once

The only time this happens, is when I do something wrong, like `cat`-ing the 12MB binary instead of the config.json, or `tail -f` into the output device of the core logging endpoint and forget to pipe into `grep`.

If that happens, I usually terminate the process anyway.
Show HN: Google Sheets as a Database – Save HTML Forms to Goggle Sheets
Well not using Patreon or Open Collective is exactly what article also talks about.
I wouldn't describe those as being "FP concepts" - though the more you get into FP you'll run across more "academic" CS where you will see those concepts, sure.

* "Algebraic effects" are still a research topic, they aren't a feature of any production programming language today (as far as I'm aware): https://overreacted.io/algebraic-effects-for-the-rest-of-us/ - did you mean "algebraic data-types" instead?

* "Linear-programming" refers to a class of optimization problems in mathematics and statistics, it has little to do with FP.

* True dependent-types are... complicated (and seen in theorem-provers more than in any language); when most people say "dependent-types" they often really mean just "refinement-types", and while refinement-types are a feature of many FP languages, they aren't exclusive to FP: in fact you can implement practical refinement-types in any conventionally-typed (even non-FP) language with cheap value-types and user-defined implicit conversions (like C#, C++, Swift, but not Java).
I wrote a small guide on that: https://kulikalov.com/minimal-viable-logging

Not Spotify, but I have several decently loaded projects running with this setup for years.
For a list supposedly compiled by someone introducing themselves as a Brit returning from abroad it's funny how it reads as a mixture of cross Atlantic cliche (ah yes, those funny, quirky Brits and their marmalade) to the usual tired stuff about how the national character has supposedly changed over night with the advent of Brexit.

The UK isn't without its challenges and issues at the moment but there are many far worse places you could find to live.
> all the best articles that I've read and shared in the past have been been things that the author would probably have felt compelled to write even if no one bothered read their work

I've felt compelled to write this question on HN. Even if I don't draw anything for me, maybe someone else will. Additionally, remembering I asked this question and didn't get inspiring answer, I might finally be compelled to write my own thing without any other questions. You never know.

And if we already do meta talk: 1. Every rule has an exception. 2. Always do most exciting thing, today it's asking a question, tomorrow it's writing an article. Rule 1 works for points 1 and 2. And also works for your impressions about best articles. :)
"lost their bearing in the absurd class hierarchies and abstractions" sounds familiar. Java app stack traces are like Neal Stephenson epics, but less entertaining.
If it is true that NFTs don't matter, I would think Miramax has no standing in this suit as any NFT sold doesn't actually have anything to do with pulp fiction the copyrighted film
Isn't this huge? We are mapping single neurons firing with very high level functions. Fascinating.
They benefit from FOSS as well, so maybe if we could do some adovacy. After all, I support paying taxes and funding stuff that doesn't directly benefit me.
Nobody is actually expected (emphasis on expected) to really know the third taught language beyond a couple phrases later in life. Many do, but it's not a universal fact.

It's more common for people to know two "local" languages (living near a border) and English, than the third language taught in school.
Yes, this list is really focused on "why Britain has always been crap and is even crapper after Brexit". A genre that has become ubiquitous in recent years. It's almost entirely composed of books and articles written by anti-Brexit Guardian and Indie writers.
P4 does not store the entire history locally, so your only limit is the amount of space on the server.

Git will pack objects after a while (initially they’re stored as-is, just compressed), but large files or enormous amounts of changes can make the repository grow to unwieldy amounts, and while git is able to perform “shallow” clones (clones which only store part of the history), not everything handles them well
But what's the use case for this?

When do I actually need to DISPLAY megabytes worth of output as lag-free as possible on a terminal?

There is no way for the intended recipient of displayed information (aka. the user) to process any of it, so what's the point of eliminating lag?
Division reducing chance of Multiplication.

https://pad.yohdah.com/827/why-the-blacksmith-needs-the-drui...
I just ordered her book.
it serves everyone. it's technology. free intellectual "property". free and open innovations.

obviously these tools amplify their user's productivity. corps are organized to be economically productive, hence they benefit enormously from free power tools.

hobbists benefit too, but since their productivity is low they benefit relatively little in terms of economic surplus.

(sure, I might do my taxes using free software, but my taxes are also trivial, two lines and that's it. sure, I might whip up a blog/website using free software to share stuff with people, but again it's economic productivity is already zero, it doesn't matter if now it's a technologically amazing site.

and sure, I work as a freelancer using these free tools, but again my productivity is very limited compared to, relative to the systems I work on for corps.)

the solution is probably a mix of a bit of wealth tax and consumption taxes.
I think an under-served market is "intermediate to advanced programming for people who didn't study computer science but can already write half-decent Python and maybe some SQL, JavaScript or Matlab/Julia/R".

People who are fine with control flow, git, unit tests etc, but who would be lost if you start talking about things like state machines or depth-first search.

I'm largely talking about myself here, but I've worked with dozens of colleagues in several different jobs who would also match this description.
Earlier tonight I was making a programming challenge list for experienced programmers. These are all small tasks but the question is can you do them.

Create a

1. Mandelbrot

2. Julia set

3. Ray tracer with shading and shadows of a few simple spheres

4. A simple virtual machine

5. Rewrite the first three programs in the virtual machines assembler

6. A simple language such as Forth for the virtual machine

7. Rewrite the first three programs in your implemented language

All of these 7 tasks together will likely take under 2,000 lines of code, maybe even under 1,000.

If you know what you're doing, each one individually should take under an hour.

Doing a write-up about your experience with this would be great. Each one of these tasks has tradeoffs and can reflect personality and approach.

This is version 1.0 of this, and I just came up with it a few hours ago so I'm open to slight modifications (perhaps an extremely easy game instead of one of the fractals)
On Naps
> Makes me remember an old report that favelas in Brazil had more TV's than refrigerators.

When radio and television started to make inroads into public life in many developed country they benefited from a lot of reasonably curated, even cultural programs ran as a public services.

In many countries national television did a lot to provide bits of education to adults, encourage adoption of the national language, learn about other cultures and so on.

What is really bad on the Internet is that many websites and services benefit from misleading content, ignorant comments, conspiracy theories, and so on.

Reminds me of https://en.wikipedia.org/wiki/Eternal_September

But perhaps it's not so bad: when the level of misinformation is high enough (e.g. on platforms like tiktok) most people learn quickly to be skeptical.
I feel like there are so many of these tutorials. The problem is that a person who wants to learn React generally does not care about Debian and something like apt update && apt install nginx.

Then depending on who's writing the tutorial, the content ranges from "create a VM and issue these commands" to gcloud commands to spawn VMs.

Usually, when a student doesn't know anything about React, they won't know anything about Debian, and the whole tutorial will go over their head. Alternatively, it will be highly shallow. Or, usually, both.
> As a user, I want to be able to support developers so they have the time to fix things that go wrong.

As an individual user, you shouldn't be required to. It's not how or why the project started, anyway. Maybe big companies whose system depend on log4j could fund it, yes.

> what amounts to slave labor

That kind of hyperbole doesn't help the discussion. The situation is nothing at all like slave labor.
The problem with that is that you end up paying everything twice because state funded healthcare sucks, the state pension sucks and the state paid ma/paternity leave is quite short.

If you're in a good tech company in Europe you generally end up having private healthcare, a private pension with employer's top up and extended ma/paternity leave.

The problem is that taxes in the USA are still fairly high and comparable to the ones in EU - you would expect some services for the amount of money you're paying.
That said, having lived in countries with state run services all my life, I don't think the solution is state run services, but cheaper private services. The problem in the USA is that governments and insurance companies inflated the cost of healthcare ridiculously.
Similarly the cost of universities in the USA has been inflated following government intervention.

Talking about state run services:
Between waiting times, poor support and the lack of competition the quality is pretty bad, despite what the state propaganda will tell you.
Having lived in the UK and in Italy I cannot but laugh hearing that NHS or the SSN are "the best healthcare systems in the world". The amount of bad experiences I had is ridiculous (some of which could have damaged my family health, had we not had the money to pursue private treatment).
Universities in Italy, which are pretty cheap at 3-4k€ per year, have several deficiencies and, despite having a handful of great professors who do it out of passion (maybe while running a profitable business on the side), it has its fair share of problems.
Not to mention the amount of freelancers in Italy who pay pension contributions every month who will never see a penny for their money.
> So we were already potentially vulnerable to the DOS [...]

> the security org at the big tech company I worked at and reported this to

I'm confused about these two statements, because I did not find any recent CVEs for log4j in the DoS category, nor related to format lookup (other than CVE-2021-44228 of course).

Perhaps I misread it, but are you basically saying that (after you reported the issue to them internally) the security team at your previous company could not successfully report a DoS vulnerability in the default configuration of a widely used (by them, at least) Apache library and make sure a CVE got assigned to track it?

If so, it would be interesting to know where the CVE/vuln-reporting chain broke, possibly to reduce the blast radius for similar future cases.

Hypothetically speaking, a CVE in March for a DoS in a problematic design/feature could have resulted in flipping the default setting earlier. Instead of chasing live RCE in the wild in December.
I sometimes get mice in the house, and found snap traps to be totally ineffective. They worked at first, but when I had more than one mouse in the house, they seemed to learn to avoid them and even how to eat the bait without setting off the mechanism.

The most generally effective trap I have found is glue traps. They are an awful device but very effective. Unfortunately, you have to kill the trapped mice yourself. They have usually sustained serious injuries in an attempt to free themselves, so even if you wanted to free them, it's too late. They will also catch other pests (like insects), while being relatively safe for any larger animal - I wouldn't put one anywhere a cat, dog, or child could get into it, but if they did, liberal application of a solvent like rubbing alcohol will solve the problem.

One time that did not work either, and after seeing an HN post on the matter, I filled a pyrex mixing bowl with cooking oil. It turns out this is fairly effective too. The video posted showed that dozens of mice had climbed in - I only had one left, but it worked. They get in and they can't get out. If you want a nonlethal trap for some reason, this is a good choice, and it's easy to put together if you don't have time to run to the store for a glue or snap trap. Of course, if you would like it to be lethal, well, you have the same problem you have with glue traps: it's up to you to deliver a coup de grace.

I have actually wondered why people go with poison - as the article even mentions one of the reviewers complaining about, you end up with rotting mice/rats in inaccessible places.
I had an ex colleague at Google talking about it on Facebook...if he had to bring an internal stuff of Facebook, it must be really bad.
Pretty new idea..... not:

https://en.wikipedia.org/wiki/Mercury_switch
Not an answer, mostly a hint :) But could it be that the folklore of Odin / Wodan came there through the Vikings? The Dutch Sinterklaas is partly based on the Wild Hunt of Odin. Odin might have inspired more civilisations with the same concept.
I've only ever used Perforce through a command-line interface. What's the UX like when using Perforce for blobs/assets? Does everyone have to use the command-line or is there a GUI experience (with fast-rendering thumbnails?)?

Forgive the questions, I'm just curious about the minutia and peculiarities of the gaming-biz because I've never worked in the field.
Perhaps "being able to search for a topic on Wikipedia" could work as a more exact definition?
The JVM running with a security policy can do this.

It's pretty rarely done though.
Investor comms fo startup founders
I've tried it a little bit now with a custom config, and have it almost the same way that Terminal.app is on my system now.

My configuration for Wezterm at the moment:

- I set the color scheme to Afterglow, which is a lot like the default color scheme of Terminal.app.

- I downloaded the SF Mono font from https://developer.apple.com/fonts/ so that it is available to Wezterm, and I defined the font size to be the one that I prefer. This is the font that Terminal.app uses by default but I guess in Terminal.app this font is actually bundled inside of the application because the font did not show up in Font Book and Wezterm couldn't find it either until I downloaded it from said link and installed it even though Terminal.app is already using it.

- I configured Command + K to clear not just scrollback (Wezterm default), but to also clear the viewport like Terminal.app does.

- I turned off tabs.

The are only a few things at the moment that I dislike about Wezterm:

1. The title of each window is simply "Wezterm", and tabs provide additional info but since I am not using tabs and the windows still are titled just "Wezterm" I am missing having the title of the Window be set to things like the current working directory and the currently running commands the way that Terminal.app does.

2. https://wezfurlong.org/wezterm/faq.html says that WezTerm version 20200620-160318-e00b076c and newer will automatically set $LANG appropriately on macOS, but I am using version 20211205-192649-672c1cc1 installed from homebrew on macOS Monterey 12.0.1, and it is not setting $LANG for me.

3. I am unable to input characters like æ, ø, å the way that I usually do which is Option + ', Option + o, and Option + a respectively on macOS with the macOS input language set to US. I don't know if this is a consequence of $LANG not being set that I mentioned above or if it's due to the application perhaps not using the operating system provided input methods.

4. When I close the last window the application closes, which is counter to how most applications on macOS work by default, and counter to how Terminal.app works by default. I often close terminals including the last terminal and then later like to tab back to Terminal.app and open a new window. With Wezterm I have to relaunch the application before I can open a new window after I have closed the last window.

Is there a way to make the Wezterm application stay running on macOS when I close the last window?
> all the best articles that I've read and shared in the past have been been things that the author would probably have felt compelled to write even if no one bothered read their work

I beg to differ. Might be true for the most interesting articles, but the most useful articles are day to day stuff like How to do X in Y imho.
> At my former place they still had hundreds of ASP Webforms with custom in-house ASP libraries that were utter shit, but they worked.

But the same is true of open source. I thought you wanted non-shit software.

In-house software is easily exploitable and full of security bugs as well.
My experience is that you learn reading Java stack traces by reading Java stack traces. There's nothing to it other than the initial stress of wall of text. Not sure about other languages though.
The log4j patch to fix this vuln is available since March 2021. 9 months later... time to panic.
Whenever I see a terminal emulator, my first question is whether it can do the VT-100 torture test.
How is it not relevant. If we stopped breeding animals that doesn’t magically mean that we go back in time 60 billions years and kill every species of farm animal that had existed in that time.
Their currency doesn't float on the market. Strict capital controls are a hidden tax on exports. Imports are then tariff-ed to balance their sheet. It's an alternative taxation method if you cannot establish a compliant citizenry around your tax system.
By the way, a common pattern of technology trasfer is a company buys a product, reverse engineer it and in a few iterations (which could be many years long) it competes on price or on quality with the original manufacturer.

I understand that an EUV machine is much more complex than a chisel but how difficult (in time) would be to clone one? Did anybody already start doing it?

A scenario is: China invades Taiwan, the chip factories blow up so China doesn't get them, it takes years to build them somewhere else for the rest of the world but China won't have those machines from ASML ever (embargoes.) But can they buy one now and clone it in a reasonable time?
Reading that chart literally, it's saying the the Read-Write "Average Latency" is +12% with the load hoisting applied.

Isn't latency something we'd want to reduce, not raise?
The Netherlands has something called "Sinterklaas". But I think celebrating children and giving presents to them is something that goes back to the very origin of mankind and can be found all over the world.
Yes that expansion I use of course. But that’s what I meant by by the language runtime, e.g the log(String msg, object[] args) is merely used as an alias for log(String.format(msg, args)).
I think the comment you're replying to was being sarcastic.
Tldr investing vs speculating
GMass Pricing Frequently Asked Questions (FAQ)
The difference to the other tutorials is that this one would not have prerequisites in terms of tools and services. It would not require anything but to copy+paste lines to go along. And that the format of shell commands makes the different approaches very easily compareable. And reproducable. You can put all of the commands into a script and have your own automated template to start new projects.

A single Docker container can be used like a fast, lightweight VM. And from there on it is just copy+paste.

So on a Linux machine the process would be:

1: docker run -v $(pwd):/var/www --rm -it -p 80:80 debian:11-slim
2: Copy+Paste the lines
3: Enjoy the running web app
FYI <https://old.reddit.com/r/BSD/comments/rdkw0j/-/ho8g0t3/?cont...> tl;dr

* the article showed FreeBSD getting 20.3 for compression level 8

* with vastly inferior hardware I got around thirty-six percent better (27.7)
smenu 0.9.19 – CLI/TUI menu builder and word(s) picker released