skysight-inc/HackerNews huggingface dataset:
The issue is that java did not initially ship with logging capabilities, and by the time it was part of the java.util package, a handful of logging systems had already been introduced by library vendors. JBoss, Jakarta Commons, Log4j and ultimately slf4j all were introduced to address these shortcomings.

The larger issue is in javas dependency system are built with dependencies on these libraries, so if there is no commons logging (or bridge, ala slf4j), then the program won't run.

There are a few other techinical traps with the jvm, like using system.out logging can cause issues with threaded code, or having one giant static logger being imported all over the place conveniently (this is before inversion-of-control became the dominant paradigm) had a few shortcomings, especially as programs grew. Ultimately, though, if you were going to use some third party libraries or app servers, you were almost certainly going to get pulled into the commons-logging vortex, which means you're now configuring that AND your homespun logger.

There is also the case for things like SOLR, where it might be just being used out of the box, but the distribution includes the affected JARs, even if you're just posting and retrieving documents with a python script doing print-logging.

Honestly, I didn't even know log4j2 was a thing, I've moved as much over to slf4j/logback as I could ages ago because of the madness of the JDK logging ecosystem.
Ignore anyone who tells you that you're lucky and that this situation isn't a problem. Great good fortune can be just as challenging as great misfortune, and they both force you to adjust how you are living.

But, be glad that you have more options than this other guy who also lost his drive:

https://news.ycombinator.com/item?id=6809065

https://news.ycombinator.com/item?id=29458352
It's pretty easy to understand really; it allows engineers to focus on other things and do more. It's not nefarious or because people are always lazy, but the choice between spending time on a business feature or a logging library when one exists that is widely used is hard to sell.
Sea otters are known to be more aggressive than river otters but I do not think they view humans as preys. It is probably a territorial or mating reason in your case.

I have read different reports of what the OP mentioned. The official statement by the park is that he (as reported to them by himself) ran through the pack of otters because of poor visibility (early morning) and tried to get them to do something about the otters. That is quite different from what the OP claims.
I'll solve your problem for the low, low price of €7.4M!
Indeed: https://twitter.com/hypergeometer/status/1470505437934067725
Forgive me if this sounds wrong, it’s not intentioned that way, but a question that popped into my mind about the implications of this.

Is groping in real world the same thing as groping in virtual world? If so, how does this change how we see certain behaviors in the gaming world that are seen as completely normal (like T-bagging)?
Personally, Id go build something interesting with the money either a business or a community (some kind of lifestyle business with a community baked into it)
And on the other hand one of the biggest annoyances of the web - autoplaying videos - is enabled by default! Clearly shows that you cannot please everyone with your defaults, no matter how hard you try.
There's been a slow but noticeable march of open-source things replacing closed-source things over time.

[Open source] software will eat the world, and all that
I wonder if using Rust here adds any safety, or how "much" it adds, because there is a lot of "pub unsafe extern "C"" in the Rust code, there are many uses of "unsafe" (that do affect other parts of the code). In this situation, does using Rust make a significant difference in terms of safety? Genuinely curious.
Which has pros and cons: a pointer indirection can be expensive so the potential additional cost is hidden and pointers semantic is so different than hiding their usage is a bit risky..
That said this simplify refactoring and is much less 'noisy' to read.
My preference is Pascal style but with an @ instead of a ^ which feels a bit weird.
>It's a nice sum of money. But it's certainly not enough to live doing nothing for the rest of your life.

In what planet is this the case? Aspen? Gstaad?

In most countries of earth, less than half of that is enough to live comfortably to the ripe old age of 90 from 27 - not investing for anything above inflation, and just taking a monthly cut otherwise.

You can trivially buy a house for 100-300K (no rent anymore) and then for e.g. 3 million you get 50K/year. That's more than most people make in tons of European countries with comfortable middle class existance, and it is after taxes, and without all the burdens associated with working (like mandating living close to this or that expensive area to be near work, communiting costs, and so on), and it's also guaranteed (unlike e.g. work, where people can be fired, freelancing which has hot/cold periods, etc.).
Actually the future is a language that best fits YOUR needs.
This comment isn't even consistent with itself. First you say:

> Who should get the blame then, the users? Duh, no.

And then you say:

> I don't use the code, so why in the world should I be expected to fix the code? Do you use the code? Why didn't YOU fix it?

Just take a step back, stop trying to throw shade at anyone and everyone, and look at the situation analytically.

I don't really see the point of these comments. The people who make a contribution to the world are the people who see a problem and take practical steps to fix it and improve the situation, rather than the people who see a problem and immediately descend into finger-pointing and shouting.
> I don't believe that a single book can significantly change your life

Yes it can. I don't merely think so or believe so, I know so.
> What is so complicated about logging that you can't implement the necessary functionality in your own codebase, and instead have to adopt a third-party library?

(1) Coordinating with dependencies requires at a minimum a common API (which, in a statically typed language, means a library providing at least the interface).

(2) Configurability to log to different destinations and with different formats, which you eventually tend to want on major or long-lived projects, can be fiddly, as can the specifics of different formats and targets. Each of the bits is simple, but added up it's a lot over time, and reinventing the wheel, the axle, the tire, and the air pump for it just doesn't make a lot of sense. Especially given the need for a library for #1, it's best to get the core functionality together with it, and the peripheral pieces either together or as plugins, and only solving unique problems, if you have them.
> Most humans ever born, are still alive today

This is not even close to being true
> Sometimes I only get a few minutes of reading here and there. Sometimes there's a few hours at a time. But it's on the level of when I was a child and teenager again.

So I dunno about everyone else, but thinking back on my teenage reading habits (which, like plenty others here, I could sit and read for hours and never find time nowadays), I didn't only read for hours at a time. I always had a large book in my backpack I could read a few pages of between classes, a smaller book that would fit in a pocket outside of school for similar short waiting times, and a third book sitting next to my bed where I'd read one full chapter each night. Then the full-day reading times would usually be if I found a fourth book where I couldn't help myself.

I brought back the one-chapter-per-night thing several years ago and I've been getting through books fast enough I no longer feel like I'm missing out. It's still rare that I sit for hours reading, but so many times I've had to make myself stop and go to sleep I no longer feel like it's out of my reach.
So... paid piracy...
I like cast iron, stainless steel, or ceramic coated (think Le Creuset) for cooking surfaces, with glass for storage. For some items, waxed paper/fabric is a good storage. For now, I'm using reusable silicone bags for some items until such time as research shows that's not a good idea. I know there's a ton of food grade plastics used in commercial food production, but in my own kitchen I try to stay away from plastics.
Welcome to GDPR and hello to trace log everything. :)
Sure, I always have to spend time checking logs and tuning the queries like that. By default, Django selects everything. I used to discover that joins and prefetches were hauling in large text fields when I only wanted an id or a slug.

Prisma has a great API for this, and it's easy to tune. By default is prefetches and selects related even several levels of joins deep.
Proof of Stake (PoS) is here and it is being used by Ubisoft/Tezos. Literally the only blockchain left to convert is Ethereum, all the other NFT chains - Tezos, Algorand, Solana - are PoS.

Seriously criticising blockchain due to energy usage will age like milk, considering what’s happening. Everyone is in PoS expect Ethereum. Your whole argument here is just a criticism of the Ethereum blokchain.
No...

We observe with telescopes that the universe is expanding. We don't know why, so we call the mysterious force dark energy. It's just a name for something that we are objectively observing.

(Also this has nothing to do with dark matter, that unrelated to this discussion and you're just getting the names conflated.)
I got some wisdom!
Funny bug though

> Your pain is our concern so here's some wisdom:
How many programmers does it take to change a light bulb?
None – It’s a hardware problem
Windows stack corruption – a journey into the bowels of the beast
Constexpr everything – stdlib, microkernel, apps, unit tests [video]
I think the scoring is done from the assumption that many users may be concatenating a log string instead of formatting it. If you format your log strings, 7.5 is definitely too high.
Great! Looking forward to talking :)

If I were you, I'd do everything possible to answer your initial question (is web scraping a viable business) before bringing other people and their money into it. Everything gets much, much harder once other people's time and money is involved (both the process of convincing them, AND the potential process of realizing you were wrong).

There's lots of ways to build a business, so take my advice with a grain of salt. But especially if you're worried about it, I'd highly recommend focusing on getting to a few paying customers before involving VCs or employees. If you're here asking that question, you can be sure they will be too (minus the initial conviction you have).

(The one exception is a co-founder! It's lonely starting a company, so you should definitely consider trying to find a co-founder that you love working with.)
https://hn.lindylearn.io/years/1321 for anyone else hunting

for some reason it doesnt show up in the decade view https://hn.lindylearn.io/years/1320
Great example, especially considering op found that he added that example as a mistake :D
Very detailed, I love these kinds of write-ups.
Pentagon invites hackers to attack its system: https://www.hackerslist.co/pentagon-invites-hackers-to-attac...
It does not matter whether the curve is exponential or not. What matters is whether sick people get adequate care and whether hospital personnel gets adequate rest and pay. With more covid specialized hospitals, both restrictions could be weaker and more people could be saved.

Many governments just do not want to put effort and money towards that. Some of them even talk about reducing hospitals and let thousands of doctors and nurses quit (Slovakia). It is disgusting and reveals what kind of people are in charge.
It also allows you to produce some colors of glaze that are hard otherwise.
You could give it away.
Omnizart: Library for automatic music transcription
> You can cause just as much damage by wasting everybody's time with organizational politics and "safety first" hand wringing, but then what are they going to say?

They’ll probably say you’re promoted!
If the only news media on consume is New Yorker, NYT and The Atlantic (all of which are rated as Left Bias news sources) then you are likely already in an echo chamber, so when exposed to a non-echo chamber source with comments (like HN) you come way with a false attribution as to what is propaganda, and what the source of that propaganda is
I think the only "hard" part about the syntax of C are pointers. Reading e.g. i++ *a->b[0]
> this falls for the same kind of over-engineering which caused log4j's issues in the first place

Because it uses an effects system, which are designed to control side effects like the one which caused log4j's vulnerability, it looks like a reaction against log4j, not "more of the same problem".

Whether this is a sound approach or not, I cannot say. But definitely not a case of log4j-like overengineering.
Note that the sovereignty of Hong Kong is not as clear cut, because history.

Hong Kong was given to the Britain by three treaties in the 19th century (1842 Treaty of Nanking, 1860 Convention of Peking, 1898 The Second Convention of Peking), and the true copies of all treaties are in the hand of Taiwan, which were brought to Taiwan by the KMT government during its retreat to Taiwan before 1950.

If the declaration behind Hong Kong’s 1997 handover to China (the Sino–British Joint Declaration of 1984) is revoked, arguably it could be contested if Hong Kong should belong to the holder of the bearer shares of the three treaties, Taiwan. (See previous discussion [1]).

And in the most recent six-monthly report on Hong Kong published on 14 December 2021 [2], the UK government stated that China is not complying with the Sino-British Joint Declaration:

With China now in a state of ongoing non-compliance with its international obligations under the UN-registered Sino-British Joint Declaration, the UK will continue to work with international partners to hold China to its legally binding obligations on Hong Kong. Upholding the promises it entered into freely is in the best interests of Hong Kong’s stability and prosperity.

China is not-complying the declaration behind Hong Kong’s 1997 handover to China.

[1]: https://news.ycombinator.com/item?id=23260934

[2]: https://www.gov.uk/government/publications/six-monthly-repor... " Six-monthly report on Hong Kong: 1 January to 30 June 2021"
It's been a minute since I primarily developed in Java, but back then we had switched away from log4j in favor of slf4j / logback. These were written by the author of log4j. We switched because they were significantly simpler than log4j.

Switching over merely involved changing the jar files we used, and redoing the config.
I had read parts of the manual years ago, and I concede quickly enough got bored. All we need to sabotage a system is a little bit of imagination coupled with paranoia to sustain damage long term.
It's amazing that this library is used by so many large enterprises yet none of them made an effort to thoroughly audit the code (actually, it looks like Alibaba reported the first one. But the point stands that the code was used for so long and by so many.)
> How do we make non-falsifiable claims and objective laws either way? “You aren’t a person until mommy says so” seems just as troublesome as “ending anything that could be a person is always murder”.

You don't ;). Just gotta pick a value system and kind of push for your team to win. If you're in the US, we've kind of been operating in this BS emotivistic meta-ethical framework for like 70 years and I doubt we'll escape it any time soon. We'd need re-education camps in order to come to a consensus on a value system...
A very provoking current book is "The Dawn of Everything - a new history of humanity" by Graeber & Wengrow. It is the first book I'm aware that takes the general intellectual public's conversation through history and compares that against now known facts from archeological data. It demonstrates, quite soundly, that the current narrative of human civilization is a comforting fiction and the truth is... the content of the book. Extremely engrossing and constantly relevant to the political conflicts dividing human civilization across the globe.
Many major open-source projects actually have commercial contributors who actually see the value in the software.

Of course, many; many do not - but I’m seeing it happen a lot more often these days, which is nice. :)
Low citation count does not imply it's an untrustworthy journal. Sometimes niche knowledge is useful – as in the present case of food contamination studies!
Ask HN: What are you un-learning?
Love this response!

> having >5h of free time a day is detrimental to happiness

Experienced this first hand, so true! Didn't know about the shorter live expectancy. Thanks for linking to the sources :)
Presumably the app also has other assets like js and frontend that need to be hosted. These aren't just compiled and stuffed in The Blockchain until the end of time.

Only the compiled contract itself.

Right?
It is almost as if it was written with people doing a lot of IO and internet :D
There's a big effort to make that happen though, with Julia interop https://github.com/JuliaInterop
>The five mugs chosen for this study were selected because they were found to contain lead in a screening-level assessment. Specifically, 24 mugs from the authors’ office were tested

This is an interesting (and maybe not too rigorous) method of selecting research samples, and points towards the need for another study: How representative was this 5:24 ratio of lead bearing mugs? Greater or less than what you would find in the broader mug population?

It's also fun to imagine how the researchers came about this:

--Was it boredom? ("Hey Shannon, I'm in between projects, how about we go see if there's anything in the kitchen area that could be dangerous?")

--Maybe serendipitous? ("Shannon, I just read an excellent novel that happened to mention the role that lead plays in ceramics an enamel finishes. Let's have go at the office mug collection and see what we find!")

--Brute force? ("Lead seems to get into everything these days... let's test every single thing in the office.")
It's also only an 8% difference...
"Object-oriented programming including generics, roles" is basically it, as far as I know following developments from an appropriate distance.
That sounds like a wild exaggeration. The internet is a fast communication tool but most critical communication tasks can still be performed by telephone, mail, courier etc. All of the physical production and transport infrastructure is still there, people are smart and resourceful and will quickly route around the failed part of the infrastructure, albeit with degraded performance.

You might not hear from your grandmother for a while, but the John Deere company will immediately cough up their root "internet only" master key when the army show up at their door demanding those tractors work for national security.

A company might go bankrupt by way of CRM crash today, when every competitor has a working CRM. If their activity becomes critical for keeping a large part of the population alive, then silly things like investor and management decisions, accounting law, employee freedom to not come into work etc. go out the window. Money is ultimately just a symbolic representation of work and value, in a crisis they can be completely ignored for a limited time.
Interview with Albert Bourla, Pfizer CEO (Lex Fridman Podcast)
You basically didn't
I’m not surprised by Osage Orange. There is a reason it is prized by bow (as in archery) makers.

Too bad they couldn’t do Yew too. That is another top bow wood.
I think most people understand that ARM means more than just "ARM vs. x86", its much more of an economic and control play than an architecture play. Sure from the people who end up wanting to use the chips its all about that, but from the companies that buy x86 chips from Intel or AMD, they are willing to spend their R&D money to get something that meets their needs.

Personally I would chalk this up to chip companies doing what is called "value based selling".. instead of saying, hey how much do we need as a company to be profitable at a level we are happy with, to continue to invest in our tech, grow and pursue high end goals, they basically said, hey.. how much is this chip worth to the customer? And, if we buy up all of our rivals such that they essentially have zero options besides us, then we can charge essentially whatever we want to charge -- or maintain our current pricing with no hope for the customer to get a price improvement over time.

When you get to be the size of the big trillion dollar tech companies, you say, ok yea, I'm tired of this game where you spend lots of time trying to figure out how much money I make from your chips and basing your pricing on that.. I'll just make the chips myself...
Then it appears the complaint that NFTs using too much electricity that you see on Twitter a lot is about Ethereum doing proof of work, which it won't much longer as it transitions to proof of stake. I'm really interested in Chia, which is proof of space. I wouldn't give it much consideration except it's by Bram Cohen who did BitTorrent.
> If you are a major power with the capability to make 100K+ killer drones or similar per year, going to be hard to get you to sign this.

Surely the individual decision-makers are, as with all human beings, averse to a world swarming with killer robots.

That states make indefensible decisions with much greater frequency than their individual statesfolk is so obvious at this point; it's time to simply stop tolerating their existence and move more swiftly into the next stage of information humanity.

I'm a citizen of one of the states you mention and I can assure you: amidst all the disagreement and political polarization, there is complete consensus on not wanting a world dominated by killer robots.
We asked the same thing about log4j over 10 years ago. We spent an hour or two and switched to slf4j / logback. It's written by the original author of log4j, and has a compatible api. Much simpler and much more understandable.
> If information security people would spend the same amount of time they are spending complaining about this vulnerability trying to educate their organisations on the importance of supporting open source solutions they depend on we wouldn’t be in this situation.

Security teams are stuck with securing the tire fire; they didn't choose the library or platform. If anyone should be advocating for supporting open source, it's the developers who benefit by using open source libraries.