skysight-inc/HackerNews huggingface dataset:
I am 100% with you, but you seem to miss some key points:

1. the vast majority of people do not understand how computers work: I have met many folks in both my personal and work life that do not understand *what a file is*, much less a directory (folder).

2. This whole notion of "where things are stored on the computer" is completely alien to most folks. As a matter of fact, this notion has been shoved down the throat of all Android / iOS user since inception of the ecosystems. I have found myself in a situation where I was unable to retrieve actual data I own stored on my own Android device because I made the mistake of storing it there *before* rooting the damn thing.

3. most people in the above category actively *do not* want to understand how computers work. Hence the "you don't get the mac way of doing things" comment you got. The fact that they completely hand over control over their information to Apple and are thereby imprisoned in the ecosystem and become hostages forever is completely lost on them.
Sorry this happened to you. I'm not maintainer and hadn't been around 15 years ago, but I think these days it would be much harder to sneak in some feature in unreadable code piece with initial driver submission. The whole driver would probably be NACKed. Don't know if it makes netdev more or less confrontational from you point of view though :)
Open source Calendly alternative Cal.com promises greater data control
Yes I think you are right: LKS Faculty of Medicine at The University of Hong Kong.
Just an outside perspective. Your talking about how it's easy to be frugal when you inherited $40k, earn >$100k and never have to be actually frugal, you choose to be.
US Secret Service says $US100B stolen from Covid-19 relief funds
I see too much "unsafe" in libraries, too.

I write Rust code with no "unsafe", and it's hard. Sometimes you have to go back and do a major redesign because you painted yourself into a corner. Sometimes you take a performance hit.

Some crates with "unsafe" that shouldn't have to have it:

* priority-queue ("Improved performance using some unsafe code in the implementation.")

* serde-json, uuid (takes in byte strings and makes UTF-8, without being strict enough about types.)

* crossbeam-channel (lock-free code which does atomic operations on small structs by coercing them into numeric types for which atomic operations are supported.)

There are a relatively small number of pain points which lead people into unsafe pure Rust. The language needs an effort to hammer them out. (I'm not talking about foreign function interfaces to legacy C/C++code; that's never going to be safe, but can become obsolete.)

Async is problematic, colored functions!

The web backend crowd wants to write Javascript-type code in Rust. This is a bad fit. As I've said before, web backend stuff with huge numbers of connections should be written in Go. Goroutines and garbage collection are a better fit to that problem, because there's only one thread-like construct and it's both low-overhead and preeemptable. The Rust approach complicates code that's changed frequently ("agile", right?). You have to be careful about what's async, what's a thread, what's non-threadable async, and what runs more than 100us without giving up control. Too much engineering is required for routine web server stuff. Go handles that all automatically.

I'd like to see two hard problems addressed in the language: backpointers and lock order.

You can do backpointers with strong reference counts forward and weak reference counts backwards, but now you're reference counting everywhere. If you screw up and mutably borrow twice, you get a run-time error when you call ".borrow_mut()". The borrow checker doesn't look at reference counted items. Single owner with backpointer ought to be analyzable statically, although it's hard to do. The basic constraint is that the call chain can't pass through the same mutably borrowed struct twice. That is, it's loop-free. There are additional issues about keeping forward and back pointers in sync, but those are easier than statically detecting a double borrow.

Lock order is a closely related problem. You can't lock the same thing twice in the same thread. Again, this is a constraint that the call chain can't pass through the same lock twice. Also, locks must be ordered, so that you don't deadlock by locking A, then B in one thread, while locking B, then A in another. Again, a constraint on the call chain.

Both of those are hard theoretical problems, and work is underway on addressing the first one, at least. Not having a sound solution to these problems leads to hack workarounds.

There's other little stuff to gripe about, but those are the big items that lead either to serious bugs or major rework.
BER/DER/PEM encodings are mostly quite simple, have very few subtle details.
From the comments in 2021:

> Perhaps we were not super clear in that piece – but testing is one of the things we “punted” back then and are definitely fixing now. One of our major engineering goals in the past few years was writing comprehensive test suites – and all new features are getting their share of automated tests as well. We still have way more integration tests than unit tests, but our test coverage is increasing progressively.
Malukah’s viral Skyrim song claimed [video]
But you literally said "build stamps do not change this", and it absolutely does.
Of course as I mentioned it does not look like go is adding a build time to the binary.
So just like their "Amazon's Choice" counterparts... this kind of practice should be illegal on an international basis given the ecological and human impact but corporate exploitation is still going strong.

We need much more transparency about these practices, be it SHEIN, Amazon or Apple... I do doubt however that people would make more conscious consumer choices even if they know about it. The pandemic has made me very pessimisic.
Show me any real benchmarks where actual python is faster or just as fast as C or Rust please. The python GIL shines with it's presence, it will not be as fast in any real workload and we're usually fine with that because speed doesn't usually matter that much when we're waiting on I/O all the time anyways.
Sorry, I wasn't making that clear. It's not that it isn't a factor, they clearly think it is. The question is how big a factor is it really? My experience is that the licens is less of an issue, compared to the time and resources you'd otherwise need to redesign everything.

When Jeff Atwood and Joel Spolsky started Stack Overflow they had a podcast. In that podcast Joel repeatably argued that hardware wasn't that expensive, compared to Jeffs time. His argument was that buying a larger server and scaling that way was much more cost-effective. I think that's still true, to a point, even if you didn't have the licensing cost.
Show HN: Audio-based discussion and storytelling app. Make some music too.
> Teenagers will socially reject you

You say it like it's bad thing?
Sounds like a paradigm shift ?
It takes a couple of lines to call any API in Rust using reqwest:
https://github.com/seanmonstar/reqwest

I'm not sure where this 6 hours for matrix bot thingy comes from. A better comparison would be to write something from scratch or use comparable frameworks.
Many years ago, I implemented an N64 ROM compressor that could work out a rough family tree for variations of a game. It worked something like this:

Brute force compare all the ROMs to each other and find "ancestor" with the least amount of changes as compared to any other.

Pick that as an ancestor, re-brute force check every remaining ROM against that one for changes.

It was silly and wasteful computationally but you could store 40 variations of a cart in 50MB instead of 1GB.
Yes but this role did not add the necessary privileges for it to use customer KMS keys. You can’t get an S3 object that’s encrypted with a KMS key if you don’t also have permission to decrypt with that key.

Of course Amazon could just give themselves access to decrypt with your KMS keys too, but that didn’t happen here.
Obviously it is, by default. I think GP meant there is no legal way to obtain a warrant to eavesdrop on an attorney.
As someone who's used Calendly on occasion, it works pretty well, the pricing seems reasonable. I'm not sure there's enough place in such a relatively small niche in the market (cross-organisation meeting scheduling, because if it's in the same organisation, outlook and google calendar already allow for intelligent scheduling) for many competitors ( especially Cal.com competing with themselves via the open source version, which is just a SaaS, so little value add other than hosting). However integrating payments directly for classes seems like a very smart idea. Nonetheless a billion users seems extremely optimistic.
DI is the biggest snake oil out there. The vast majority of time it's just used as a hack job to enable test isolation in weak languages and gives you no real-world decoupling.

Sure it's sometimes necessary, but I wish people would stop with the expostfacto justification. It doesn't make your code better if you add it just to test your code.
Software licenses are usually peanuts versus developer salaries and overall infrastructure costs of the whole company.
Really enjoying the simplicity. Also, great homepage: people get to see what it's all about directly. What are your plans moving forward?
In my highly regulated and audited work, there are cases where people on money laundering lists initiate a transaction, and we can’t block it because it would tip them off that they have been detected, in theory some other department or organization is supposed to follow up
Show HN: A Bash Web Framework
Hello everyone,
I wanted to share with you a project I launched a few months ago called Zipstage, the collaborative audio platform.
It is the very first app that I built, so I’d love to hear your sincere opinion about it. Design, implementation, usability or whatever else you may want to share.

Thank you in advance for your help folks.

Here’s a story I wrote recently telling why and how I built it, just in case you’re curious: https://rgtomaz.medium.com/i-made-an-app-so-anyone-can-help-...

Cheers.
Rodrigo Tomaz.
As someone who has been poor 10 years ago, trying to raise a family, that’s just false. We had to deal with the literal situation from the quote: shoes. We could only afford cheap ones for our children and the shoes “broke” before they grew out of them. If you think this only happened 150 years ago then I envy your privileged outlook on life. This quote is as relevant today, as it was then. Being poor is expensive.
You couldn't run ASP.NET in Linux back then, so you had to pay for a Windows license, too.
At least it isn't really subject to arbitrary moderation like on reddit. I have a pretty good idea what posts are sensible on hn.

However, I keep posting stuff on r/de (German subreddit) and mods remove it or let it pass at a whim even though very clear rules have been established over the years. Sometimes thread types which I have clearly seen before with hundreds of upvotes are removed because of violating content rules. The next day someone posts a picture of a frog and it's sitting at 2.6k upvotes (I think the Wednesday frog meme is super embarrassing but anyway...)
By default you need the same GOPATH and GOROOT.

Compiler version must be identical (not a huge stretch).

cgo reproducibility is not a guarantee.
Glad you like it! Either me or other users submit sites (you need an account). At the moment I am the only one reviewing them. It's hard to judge sometimes, but it's the least I can do prevent spam and clickbait bullshit.
Stack Overflow predates any of those being open source.
There is already a classic "The Wing or the Thigh" [0] with Louis de Funes.

[0] https://en.wikipedia.org/wiki/The_Wing_or_the_Thigh
If they had that capability, they would use it for intelligence gathering, and not risking leaking information about it in some crypto BEC scam.
Napalm Death at 00:01. Short songs as usual :-)
What's nested Xorg? Do you mean you run each app in a separate VNC or RDP server?
A simple bash framework with the possibility to write API and web apps.

Examples:
https://github.com/dzove855/yoctapi

The api will even audit every request and it's to implement other methods.

Database plugin:
https://github.com/dzove855/libyosh-gateway
Wouldn't they have to pay for IIS as well? (Not mentioning Windows itself?)
Recently read about Kevin Strickland, who was just discharged for a 1979, case which is now proven that he did not commit.. After 43 years in Jail!!!
Also that Silk road guy Ross Ulbricht was given Double life imprisonment + 40 years without possibility of parole for a non violent crime.. These days it's getting ridiculous.
A very shortsighted take. Sure, yes "they" can do whatever they want.

But even in the world you are imagining where AWS is peeking at customer's data willy-nilly, I have to imagine you don't believe that every tech support representative should have default access to every AWS customer's storage data, do you?

Even a dishonest unethical company that created backdoors for its employees would surely gate their backdoors.

This change (a mistaken one that was rolled back immediately) would have given the keys through the front door to presumably thousand low-level employees.

BTW, AWS spends a long time talking about how verifiably they do not have access to customer data. If you're interested in crypto (otherwise not sure why you are referencing it here), this kind of thing should be right up your alley: https://www.youtube.com/watch?v=4J8REvs7zaY
That is a really false statement. This is why contracts, audits,... exists and they define what each party can and can't do. When in violation this could result in huge fines, loss of business,...

You can also securely storage your data on other servers by using client-side encryption.

Not every business/person has the means or knowledge to have their own datacenter.
The code was a trainwreck because it was written with the aim of getting it done in a handful of hours and without using a properly designed Matrix crate. For a real world use case, you'd just use matrix-rust-sdk.
Dang those rates are crazy.

In the Netherlands, students loans are guven by the state. The interest rate is legally set to a mix of government bond interest (10 and 5 years). They included a clause that the interest never goes negative.
> A warrant lets someone search my belongings; it does not compel me
> to give law enforcement the information they are seeking.

This is the issue. An investigator's limited permission to search a specific aspect of one's belongings does not infringe upon one's right to be secure in the remainder of his belongings. At least, not in the context of nations which have explicitly granted that right.
Such bravery :-/
I'm not sure about that one, but most bridges should work, see
https://gitlab.com/famedly/conduit/-/blob/next/APPSERVICES.m...
Dynamic optimizations for the specific target machine and also long lifetimes. For example when a specific target machine has a specific CPU instruction that the JIT can leverage, or has a ton of RAM that the JIT can use for caching such as for memoized methods.
Having never heard of this, I found the FAQ page an informative starting point.

https://clean.cs.ru.nl/FAQ

In simplistic terms, Clean seems to be a “better Haskell”.

Edit: I just downloaded the bundle tar, looked at some sources and found out that vim has syntax coloring for Clean out of the box. Vim never ceases to amaze me.

More Edit: Clean transpiles to C, which means that when you look at generated code, or just disassemble the resulting binary, you will probably be able to make sense of what you see. When I disassemble a Haskell binary, I can't make heads or tails of it.
I remember asking the same question about Java many years ago.

Some optimizations become much easier in the actual running environment. You know the hardware so don't have to cater to lowest common denominator, and you know what's actually happening and don't have to guess.

Profile-guided optimizations later showed up to bridge some of the gap, but I think JITs are typically built with a different mind set, so there are some things they excel at.

A funny example is something like a regexp matcher where a JIT might take an actual regexp built on the fly, say based on a user searching for "foo bar", and optimize code for it.
That's awesome! I'm working for https://fairbee.com , a Dutch startup that's trying to get more attention to these kinds of brands, there's a bunch of (Dutch and international) companies trying to do better :)

Thanks for the NPO tip: definitely going to watch it :)
You're really full of yourself, aren't you?

But fine, thank you for schooling me in arrogance.
Yet here we are, useful or not. I applaud these kind of movements, since this company's actions were clearly amoral and they supported anybody with enough cash, mass murderer or not.

All those actions mentioned by OP dissuade talent, since when you are on the top you have tons of interesting choices. Why work somewhere you are actually ashamed of to even mention. Why on top of that working for amoral goals that make world a much worse place, innocent people get killed just because of your work etc.

Those talents will find some work easily. Maybe even for competition. But its the right move, the more the better.
I love my adidas hoodie that already is 10y+
The sad truth is that quality clothig is not available in many countries. All my best stuff was bought in France. In Poland they sell crap(too small after washing 3 times, super thin) and even more expensive. There are some local companies with quality stuff but they are niche.
I am not sure what you wanted to point out, pc86, there: I checked the linked page and it seems to be a blog post which is informative about this general topic, rhetorically satirizing through The Onion's "No Way To Prevent This" format: it describes and links to

-- https://www.cpomagazine.com/cyber-security/brazils-health-mi...

-- https://www.zdnet.com/article/personal-data-of-16-million-br...

-- https://en.wikipedia.org/wiki/Yahoo!_data_breaches#Late_2014...

-- https://www.trendmicro.com/vinfo/us/security/news/virtualiza...

-- https://www.timesofisrael.com/in-vast-breach-likud-campaign-...

-- https://www.csoonline.com/article/2130877/the-biggest-data-b...

-- https://kinsta.com/wordpress-market-share/#:~:text=WordPress...!

...

...And it is also informative about Qbix, which many may not know:

> Why do we all have to rely on giant corporations mediate our interactions, and trust them with our data, identity and brand? Qbix works to put power back in the hands of the people

https://qbix.com/people
Okay, opinions up front: I don't think this is worthy of "declaring a security incident. Having some experience working behind the scenes, just because this policy was changes this way doesn't mean "All AWS Support personnel had unrequited access to your S3 objects." To me, this reads as Twitter inflammatory nonsense. Here's why:

* KMS Encrypted objects would not be accessible because the support personnel would need permission policies that grant `kms:decrypot` permissions to encrypted objects. The only way this could wind up happening is if you are granting the AWS Support principal access in the KMS Key Policy.

* Objects with a default-deny bucket policy could not have been circumvented with the support team's escalated privilege. So if you have a policy that looks something like this, that data was not exposed:

{

"Action": "Deny",

"NotPrincipal": [...]

}

* Internal Checks. AWS has a lot of protections and checks in place to prevent their support personnel from accessing metadata about S3 objects. They don't have tools to fetch the actual objects unless your really high up the food-chain. Think like, people with a legal or security related reason to need to review data.

Nevertheless, I'll share some nuggets of wisdom I've accrued over the years, in a hopes to save y'all some time:

If you have an NDA with AWS, I'd recommend reaching out to your TAM and asking them about what the potential exposure was; and make sure to ask about the internal access control mechanisms.

But everyone who's concerned and DIDN'T set up data access logging already: 1) Consider turning that on to trace potential disclosures in the future. 2) Open up a case with Premium Support under the CloudTrail, state that you have a security incident and you need to retrieve data events for the time of 2021-12-23 to 2021-12-22. If granted to you, save that sucker in S3 and query it for requests coming from `support.amazonaws.com` in Athena. [0]

Hopefully this helps some of y'all.

[0] https://aws.amazon.com/premiumsupport/knowledge-center/analy...
I was fortunate to see Michael present this recently, and found the presentation convincing.

I may be a bit sheltered, but this was my first exposure to a study with so many volunteers completing involved coding tasks to assess language features.

I find Figure 3 to be particularly convincing: http://shitmyself.com/image/figure3.png
> To see whether Bronze could make Rust more usable, we conducted a randomized controlled trial with volunteers from a 633-person class, collecting data from 428 students in total.

Well, this paper starts off with a bang.

A quick search on github returns this repo [1] by mcoblenz who I assume is the first author Michael Coblenz. Unfortunately nothing but the readme has been updated in 10 months and I couldn't find a link to the latest source with a skim of the paper and bibliography.

[1] https://github.com/mcoblenz/Bronze
Intel apologises in China over Xinjiang supplier statement
Did you even bother to read my top level comment about not calling people you disagree with as shills before you replied to it? Or did you just piggyback off the top comment at the time to soapbox?
Nice talk, but you are one of the biggest offenders by using moderation powers to curtail discussion around topics which may not fit the majority world-view while refusing to treat the view of ignorant morons similarly. I have seen it happen several times over the last decade. And no, I am not going to present any "evidence" here.
Golang and Cryptography
Log4j, the Monster from Your Yard
My feeling is that the "myth" they're trying to debunk is that there are rigid, "bright-line" separations between different brain regions, and that specifics regions are completely and uniquely responsible, for now and forevermore, for some specific "thing". Where the reality is that there is structure, but the lines are fuzzier, functionality overlaps, and neural plasticity allows for brain region to alter their function (to some extent) over time.
They could test the market for these in Norway, the Scottish Islands or the Greek Islands. Places where 15 min flights with low passenger numbers over a distance of 50-100km would have a high value compared to a 1-2hr ferry crossing. Wouldn’t need to go anywhere near max range and would still mostly over land not much other air traffic to bump into.
Ya, that makes sense... But then how much should I save. It's so volatile that I would give multiple thoughts before saving anything close to a lawyers fee in bitcoin.
Not as easy to use, because it does not have a simple cli, but nested layouts are better than dot's with the Eclipse Layout Kernel. There is a JavaScript version, as well and you can try it in recent plantuml versions.

[0] https://www.eclipse.org/elk

[1] https://github.com/eclipse/elk

[2] https://plantuml.com/elk
> Not it's a human bug (not knowing enough about your system).

I know enough about my systems, yet I think Windows is doing it right. The numbers reported by Linux, or visible on the “memory composition” diagram in Windows task manager, are borderline useless for everyone except OS kernel developers.

Despite I know these hairy implementation details about the ways OS kernel manages physical memory, I don’t really care. When I check these system tools, in 100% of cases I want answer to the question “how much ram my applications could use without swapping”.
My new AEG goes all the way to 20C. In single step. Great for fermentation of sourdough i.e.!