skysight-inc/HackerNews huggingface dataset:
I had the Galaxy S3 and loved it back then. I’ve converted from android somewhat recently (was a major advocate before, but now have moved away from all Google products) and have found the iPhone SE 2020 to be perfect. Small enough for my pocket, works great, and still has probably 4+ years of full software updates. You might even be able to find a sale since they’re over a year old now
about this clustering, what's the average distance between the stars in lightyears?
so the suggestion is that because these stars have similar as of yet unexplained features and are clustered together that these features could be artificial?
You really need to update your attitude, the new Microsoft has embraced open source in a very real and meaningful way.

https://dotnet.microsoft.com/en-us/download

https://github.com/PowerShell/PowerShell

PowerShell is SO much better than any Linux/Unix shell.
My experience is the same as theirs. In recent years I've run into more compiler bugs than memory bugs in the large, complex C++ code bases I work with.

It makes sense. A common use case for C++ today is writing high-performance software, where the software architecture is likely to be schedule-driven (e.g. thread-per-core, userspace I/O, etc). In these cases, you see minimal heap allocation, shared structures, or locking. Modern C++ is pretty safe by default for this; it allows you to do unsafe things, and to do safe things that the Rust compiler deems unsafe, but there isn't a cabal forcing people to write non-idiomatic unsafe C++ code in software architectures where the code is naturally almost entirely single-threaded and with few heap allocations.

The most insidious bugs I see in modern C++ code bases are scheduling bugs e.g. logical or behavioral edge cases due to pure async execution, which can be very subtle. Rust doesn't help with that.
powershell (core) is on linux btw
The main problem with their issues seems to be that nobody has the ability to close anything. Sure, there are the likely accidental reports and the tutorial requests like the one you posted, but any large enough project is bound to get those.

Even that one you linked had someone from the community likely solve their problem and could be closed both for being irrelevant and for being solved. Several of the issues I checked were similar, probably bad reports but solved anyway.
Bitfields are hard! They are potentially unaligned, thus interact poorly with some language features, like pointers and references. And their size isn't a multiple of bytes, unlike any other value, which causes problems as well. They interact poorly with padding and the general idea of Rust ABIs that enables optimizations like reordering fields and using "niches" (invalid values) to find a more compact layout for structs and enums.

I agree Rust should eventually have some native support for bitfields, but only if it's a high quality spec that addresses the outstanding concerns - Rust should specifically avoid the C mess, which isn't usable for most projects.

But this doesn't mean bitfields can't be done in Rust; it's just not in the stdlib (yet). See this post[0] which contains a survey of various libraries (and their respective limitations), and this slightly older article [1]. Those articles somehow missed the modular-bitfield crate [2], which is perhaps the nicest to use, and is what I would recommend you.

If you don't care about the specifics you can get any crate discussed in the above articles and use them.

About interoperability with C (and C++), I really like bindgen, cbindgen and cxx. The bindgen book [3] is straighforward. This section of cxx documentation [4] also describes the tradeoffs between the different FFI approaches. I don't know Ada though, so I must ask: what does Ada do?

About this,

> I just don't see what Rust has to offer that Ada didn't already address.

Off the top of my head, the crates ecosystem, the borrow checker, sum types with pattern matching [5], a stellar story for error handling (beats any language I know hands down - that is, if you use crates like thiserror and anyhow).

[0] https://immunant.com/blog/2020/01/bitfields/

[1] https://myrrlyn.net/blog/misc/bitfields-in-rust

[2] https://crates.io/crates/modular-bitfield

[3] https://rust-lang.github.io/rust-bindgen/

[4] https://cxx.rs/context.html

[5] https://chadaustin.me/2015/07/sum-types/
I can't use an Ulephone on Verizon, which is the only carrier in town that can deal with gnarly mountain terrain. Very difficult cell carrier coverage situation.

Friend of mine was really happy with his Ulephone, great value if it works for you.
PowerShell is a vast improvement over every Linux/Unix shell I have every used.
Yes but then you need to spoof it to the CA itself which is harder. They also publish every cert they sign in transparency logs so the owner can monitor for any funky business
I think it will change. I sense a reactive trend that will impact sys/shell interactions coming.
I agree. The few times I've cared fell on deaf ears.
It’s a small namespace, bad idea to pick something from a small occupied by everybody else making things too in the future and unbeknownst to you from the past
What do you see as the alternative? And isn't all this opt-in, you can run your own dns and do let's encrypt yourself if you prefer?
They're rewarded by sometimes paying off, like what???
Also, the text on the page reads as tone-deaf enough for me to wonder if it's deliberately written to misrepresent the nature of the study activities to people on the IRB who are unfamiliar with technology. A quick Googling for everyone on the Stanford IRB Committee [1] shows Kyle Jamieson [2] as the only CS person – everyone else seems to be a clinician, scientist, or administrator.

> As part of the study, we are asking public websites about their processes for responding to GDPR and CCPA data access requests. We attempt to identify a website's correct email address for data access requests through an automated system.

You cannot "ask a website" and a website doesn't have a "correct email address". Given the targeted nature of the emails, I have trouble believing that these phrases were written in good faith by someone who understands that they are emailing the webmaster for a website, and expect an answer within a reasonable timeframe.

----------------------------------------

[1] https://ria.princeton.edu/Human-Research/Committee

[2] https://www.cs.princeton.edu/~kylej/
I wonder if a stove measuring the temperature on the bottom of pan would be accurate enough. For gas I guess it wouldn't work, but for induction where the pan is heated internally, it should work as long as the temperature between the bottom and surface of the pan do not have too much of a delta.
Also, while not a legal threat, "My questions are about your process for when I do submit a request." strongly implies an intent to submit a legal CCPA request in the future. Using "if" instead of "when" would have somewhat mitigated this, although it still comes across as somebody trying to find a loophole.
For whatever automation a new tool gives you, you get new maintenance on that tool, other languages will want a tool that gives those features, systems running older versions will want upgrades in order to support the tool, 20% time will be spent on getting it running immaculately on Emacs, security researchers will find bugs in the tool so everyone has to fix, patch and upgrade, web sites for showing off the tool need designing and hosting, support forums have to be staffed, blogs have to be written, some novel use of the tool requires integration with various other systems, enterprise asks for a powerbi version that can integrate with oracle (it ends up being 5x slower, but does lead to more jobs in maintenance and meetings), more research is produced etc. etc.
You can just use the other site that has millions and millions of videos. Oh wait... Well at least you can start another site aggregates millions and millions of videos. Dang it, then that site will run into the same problems.

Joking aside, I think the "competition is just a click away" applies here it's just that the competition isnt as good.
am i missing something? i don't see anything about research or studies in the original email.

maybe it's a legitimate inquiry?

maybe it's performance art? (does the blog post have to be taken down if a right to be forgotten request is filed?)

does the ccpa even apply to hobby or non-revenue generating endeavors?
It's not just developers, and it's not just about speed, it's also designers / UX bods who need to heed this. My decently powered work laptop from job 1 has a fairly rubbish screen, which means that a lot of the subtle hover effects, 1 pixel light grey on lighter grey divisions and skinny fonts either aren't visible or are incredibly difficult to see. A good trick if you're working on a large, hi res screen is to have a small and crappy second monitor hooked up if you're doing any UI work so you can see what it will actually look like to a lot of your users.
I want my sum types damnit. Nothing like writing a case match over a sum type instead of fighting inheritance.
Academic research has a well established and formal set of ethics rules.

These rules are not as established or strict for other professions.
My take: yes, a researcher misrepresented who they were. But that misrepresentation had nothing to do with the alleged harm. I see no reason to believe that the writer's reaction would have been any different if the request had been a completely legitimate one, which it very well could have been. The actual substance of the request was polite, non-threatening, and potentially legitimate. If the writer had bothered to do even a few minutes of research, she would have realized that the cited law did not apply to her and the requester was simply wrong when they said that it was. A panic attack was IMHO an extreme overreaction. Solicitations are sent out under false pretenses all the time by people with far more sinister motives. I think it's reasonable to expect adults in today's world to be able to take such things in stride and not freak out about them (or at least do a little bit of homework before freaking out).
Up until "singular library archive" I would say that exists today in the form of Ada and formal methods (and both in the form of SPARK)
The researcher invented false identities, and then used them to imply a legal requirement to expend labor and respond without notifying the recipient that they were just doing a study for academia. There are plenty of things you are allowed to do as an ordinary citizen that are considered unethical in an academic context.

As an absurd example of something that is highly unethical, but perfectly legal: research into whether certain images or colors on protest signs are likely to elicit a response. You choose military funerals as the protest site. In the US the right to protest at a funeral has been confirmed by the courts. This would still be an unethical action.

Many companies, including ones that I’ve worked for, that received a message like this would take it VERY seriously and expend some expensive resources (lawyers and programmers) to discover that ccpa does not apply and that they aren’t required to respond.

A more ethical way to gather this data would have been to be honest about identity and purpose, Notify the recipient that their response would be anonymized and never used against them, and to inform them that a response is not required.
The end must be nigh if Apple breaks its sinister silence.
- media sites like YouTube (some people prefer that when they click on a new video, it actually starts playing)
- notification sounds
- playlists of any sort (music or video)

Most of this can be worked around by prompting the user on load and then never reloading the page (SPA fetch-and-replace pattern), but even big sites screw this up (like YouTube, where the memory usage increases with every "fake reload").

Again, I wouldn't want just any site to do this unexpectedly, but the ones where I want those features should be able to do it.
Outbreak caused by the SARS-CoV-2 Omicron variant in Norway, Nov to Dec 2021
> How does any of this equally not apply to PostgreSQL ?

1. Postgres is easier to setup and run (than Kafka)
2. Most shops already have Postgres running (TFA is targeted to these shops)
3. Postgres is easier to adapt to changing access patterns (than Kafka).

----

> Is this some magical ...

Why must your adversary (Postgres) meet some mythical standard when your fighter (Kafka) doesn't meet even basic standards.
I have some old dinnerware from ca 1950. One plate has a crack halfway through and when used in the microwave the plate gets blazing hot while food stays frozen. It has some form of metallic glaze that makes it act as a slotted disc absorbing all energy. I never use them now on the off chance they're lead glazed.
"If it isn't broken, don't fix it"

There's an argument for rampant consumption as a toxic buying pattern. If we are upgrading our systems just to use bloated webpages - webpages that offer nothing of substance over webpages circa 20 years ago, then it is worth asking what we are really gaining.

In any transaction it is important to distinguish between what is being sold, what is actually delivered and the utility provided.
Airflow is a general orchestration tool that fit into the Python stack extremely well. It wasn't build to scale though, so once you want to run something more than once a second, you are going to be jumping through hoops.

My experience with Dataflow is 1.5 years old, so things might have changed, but I felt it more to be a unified, simplified Hadoop/Spark framework. It unifies the batch/streaming concepts but is still pretty low-level.

Within ELT, or ETL, Airflow/Dataflow can fulfills all 3 components.

Airbyte focuses just on EL (though we have basic T functionality around normalisation). Our intention is to leave T to the warehouse, since warehouses like Redshift/Snowflake/BigQuery are extremely powerful these days, and tools like DBT, give the users more more flexibility to recombine and consume the raw data than a specialised ELT pipeline.

In summary, I would say Airbyte is a specialised subset of Airflow/Dataflow, and it's possible to use Airbyte with either tools, though I'd guide someone towards DBT.
That provides incomplete protection even for this Log4j vulnerability, and similarly trivial "self help patching" may not be available for future vulnerabilities.
There are some content creators making stuff on other platforms but it goes from free to watch (youtube+ads) over to paid subscription and there is very little middle ground. From the youtubers I see doing alternate platforms they use the alternate as the "you'll find me here when I'm banned".
The efficiency of a government is determined by those who direct it, it's not inherent to the structure.

The Manhatten Project, the New Deal, and the Space Race were remarkably efficient and productive, back in the time that we believed that governments can and should do things, and politicians worked together in good faith.

Then corporate lobbyists bought our politicians and convinced us that governments are evil and inept, and that they shouldn't have to pay taxes because the government will just waste it. So we deregulated everything, and now billionares just waste their record profits on low orbit joyrides instead, while average Americans die preventable deaths because they can't afford healthcare (which the governments of every other developed nation manage to provide their citizens for free).
> the competition isnt as good.

The competition does not have Youtube's network effects.
If you have a String, passing a &str is free, you just.. put a & before your string. that's because if you expect a &str and pass a &String, the &String auto-derefs to &str. This is called a deref coercion[0]

Like, if you have fn f(s: &str), you can do:

let x: String = String::from(something);
f(&x);

You can see this in playground here [1] (click "Run")

To explain: both String and &str is essentially a pointer plus metadata, but &String is a double pointer (a pointer to a pointer). Rust knows how to convert double pointers to pointers, using the Deref trait. This implicit conversion is applied only in a handful of places, and only if it doesn't lead to any ambiguity (if f received a generic parameter it wouldn't work for example).

If you wanted to convert String to &str explictly, you would need to write &*x, like this (see in the playground here [2]):

let x: String = String::from(something);
f(&*x);

That's because if x has type String, *x has type str (because String impls Deref<Target = str> [3]) and &*x has type &str. This means that auto-deref changed your &x into &*x automatically.

[0] https://doc.rust-lang.org/book/ch15-02-deref.html#implicit-d...

[1] https://play.rust-lang.org/?version=stable&mode=debug&editio...

[2] https://play.rust-lang.org/?version=stable&mode=debug&editio...*

[3] https://doc.rust-lang.org/alloc/string/struct.String.html#im...
I always managed to get getter speeds using the aria2 parameter.
> generally not something companies take responsibility for

I have some bad news for you: viruses and hackers don't care about your support contracts and the delays they cause.

Actually, I tell a lie: the hackers love them.
Perfect is a very high bar.

In my mind it would undoubtedly be _better_. Sure there will be downsides, but not constantly having to spend brain power considering the proposals in Ads is pretty great.

Decision fatigue is a real thing.
> I think that the assumption that Google, with 150k (or whatever it was at the time) employees plus candidate employees, roughly approximates population trends is a reasonable starting place for a single author writing up some thoughts. If this were an academic paper we would probably expect the author to consider this at some point. If it's some thoughts the author put together on diversity? Seems like a crazy standard to me.

But we know this to be untrue: Damore's questions come up as a response to the question of "why does Google have an unrepresentatively low number of women" (and from that, the implied "how do we fix that"). To assume that Google's employees match broad population trends is to assume the entire conversation moot. In fact, everyone involved agrees that Google doesn't match general population trends, so if you're having to assume that to justify Damore's takes, something has gone wrong somewhere!

> Google hosts a diversity class, the class asks for feedback, Damore shares his thoughts on diversity

For what its worth, this is a pretty serious misrepresentation of things, and if that were the extent of things Damore wouldn't have been fired. As I understand it, he gave the feedback to HR and nothing happened. He proceeded to post the document in larger and larger discussion groups, until he eventually posted it into a really big group, where it was linked to an even bigger group. That's also a big part of what moves this from "feedback" to "manifesto", its disingenuous to call it "feedback on a diversity class" when you're emailing it to a thousand people, nearly none of whom ever took the class. That's pretty far into thesis nailed to the church door territory.

The other thing that puts it into "screed" territory is that it doesn't have a coherent thesis. Is it about gender diversity? Well a lot of it is, but it also has a significant subtheme about political diversity (and trying to psychoanalyze Google as a "left-biased" company), and has a number of potshots at "the left". Why?
> I didn't go to China and become resentful when I noticed their leadership was Chinese.

Of course not. You're a visitor.

> then eventually become resentful when I noticed white people & asians were discriminated against out of some twisted sense of fairness.

You probably need your eyes checked. White people run the United States, and Asians make up an outsized proportion of US college admissions.

> out of some twisted sense of fairness.

You haven't been reading my comments. I already addressed this. It's not supposed to be fair at the level of the individual. You need fair representation of a broad cross-section of the populace in order to achieve optimum happiness across the population.
I always thought PowerShell was slow and it's got the whole .net baggage with it. Good one with the "Microsoft semen!" Had me laughing out loud.
It's the only way to be sure I'll ever find certain videos again. And Google randomly bans users either way, they're not gonna stop if yt-dl disappears.
There were multiple emails with multiple fake identities from these domains:

envoiemail.fr
novatormail.ru
potomacmail.com
princetondmarcstudy.org
princetonprivacystudy.org
yosemitemail.com

They also send different messages, e.g. fake California residents asking about GDPR, not CCPA.
> Having not been in the Java world for many years, I was surprised log4j was still in widespread use.

It's Java; the ecosystem is, politely, rather conservative and slow moving.
I can see a valid reason for Ukrainian annexation - just for its agricultural output alone. Russia is possibly having a food problem.
> The police does that quite often to catch criminals. Sometimes they also target innocent people, is that ethical?

This should tell you something about your police, not about ethics.
specifically, deception studies are really hard to get approved - and for good reason. looks like this wasn't properly reviewed.
State of Continuous Delivery 18 Months into the Covid-19 Pandemic
The vast, vast majority of buffer overruns, memory leaks and race conditions live in Javascript code. (An interpreted, garbage-collected language.)

You don't understand what the memory safety promised by Rust actually does.

(No, it won't save you from buffer overruns. Only from segfaults.)
As an adult male, I’d rather not get my flesh bitten off or maimed. So I cannot engage in a fight with any monkey. The only fight that I would rather fight is one in which I have overwhelming odds of winning.
And it keeps getting worse with each version.
Great points!

"If you know you're going to spend 15 hours on it, then you might as well use a system you know will cost less to extend or scale over time."

I wish younger me realised that earlier :)

"And maybe even a canned CI/CD pipeline in a container so they can start iterating on it immediately."

Definitely! Although a good number of users are surprisingly happy with their Airbyte instances on a single node.

We do have a Kubernetes offering for those looking to scale Airbyte beyond a single node. We also have Kustomise/Helm deploys for this, though I'll be the first to admit that the Helm charts are mostly community-maintained and can be improved. This is one of our (my) top priorities going into the next Quarter.
So, again, why is log4j "evaluating" stuff in log strings? This is the root cause that people should be addressing

Why are people still using JDNI? It is frail enough to have logs depend on a dns lookup, I can't imagine depending on a LDAP lookup. This is not such a fundamental issue as the above but it is pretty dangerous.

Oh yes and of course one of the worse and least pythonic package in the Python standard library was "inspired" by the log4j monstrosity
The best part is the native sponsorblock integration.

It adds chapter indicators to skip the sponsored sections, opening titles, begging viewers to inflate engagement metrics (please like, comment, and subscribe!), openings of music videos that aren't the actual music, opening and closing titles/credits, etc.

Basically cuts out all the bullshit you'd otherwise have to manually skip past by spamming the arrow keys.
Just for the record, it is possible to type check format strings with regard to their actual arguments. OCaml does this, for instance, probably since its inception ~30 years ago or so.
Why is the dataset so small? Surely there must be more than 312 Tailscale users who used tailscale cert?
Maybe it's just advertising using this period to point at products like GuardDuty. These are golden times for most vendors and suppliers of anything Security related.