skysight-inc/HackerNews huggingface dataset:
The central argument is that C/C++ is not worth the trouble for new code and that using it "correctly" is a theoretical thing that even experts struggle with. C/C++ programmers keep on insisting that they've found ways to do it right, finally. Some C/C++ programmers seem to believe that, unlike everybody else, they actually have the combination of wisdom, skills, and discipline to not fall into this trap. At this point that seems rather foolish.

The author's main argument is that other languages that exclude categories of bugs that keep on popping up in the C/C++ world are good enough at this point to be used for essentially all system programming stuff.

Apple, Google, Microsoft, etc. employ the best people that money can buy them. And they've each started actively discouraging the use of C/C++ for new stuff. Google actually created Go for this reason and they are now also using a lot of Rust lately. Apple created Swift to get rid of object C. And MS has been trying to move to C# (which they created) for the last two decades to put a stop to all the embarrassing issues they had with their native stuff. They too seem to like Rust lately. And obviously they each have to own up in public regularly about cases where, "oops, we did it again" despite having spent the last few decades to avoid having to do that so regularly. The usual suspects are bits of C/C++ doing things wrong with memory and bounds checking because their programmers made a mistake. It seems leaving this to humans to do "right" just is not good enough at this point.

The article gets a bit messy with a rant on stateful vs. stateless and a few other things. But the main argument with that seems to boil down to the notion that depending on a lot of stuff like databases, memory caches, etc. that are often implemented using C/C++ is neither fast (because of network latency) nor safe (because of the above mentioned bugs and security issues). It's true and it's why alternatives to these infrastructure components written in other languages are a thing. They are plenty fast and in so far they are not, the network latency hides most of the issues to the point where you'd not notice much difference in terms of e.g. throughput or latency at the price of maybe slightly more CPU usage on servers that are mostly running nowhere even close to 100% CPU usage. Besides, adding more CPUs is cheap. Dealing with security problems is not.

And of course using Rust for things that really need to be fast is a thing. There's growing amount of projects that are about creating drop in replacements for C/C++ things that have existed for a very long time where the goal is to actually improve their performance and safety by re-implementing them in Rust. It's the argument the article does not make. But it seems that with Rust, you can have your cake and eat it in terms of performance. So, why bother with C/C++ for new stuff? Why risk security bugs when the main argument of better performance simply does not hold true anymore? It's a solid argument. But I agree the article does a weak job of making it.
If I could use the money to reform all economies to have a land value tax and implement a -5% interest rate on cash then surely the importance of the bottom 95% of humanity's billions of years in aggregate would massively outweigh 20 of mine. Not to mention that I myself would benefit from peace and stability which could be worth 20 years if I were to die in a conflict that cuts my life short, not to mention all the technological progress that would be accelerated and thereby improve the healthcare system.
Yeap, everyone overexcited about Linux improvements either forget or ignore that many hardwares are completely messed up on Linux.

My Laptop, for instance, have an issue where the kernel can’t recognize the keycode when the lid closes.

I had to write a systemd script to setkeycode to suspend when the lid shutdown.

Good luck explaining this to average windows convert that just moved to Linux.

Oh, and the brightness function keys doesn’t register at all on my system. I’ve tried everything on the archwiki.

So, yeah, if you’re lucky enough to have the right hardware it’s totally the year of Linux, if not, keep waiting
It is a bit to me too yes, I don't make the rules! I can make sense of it though: 0 is neutral, as expected; comments start at 1, because everybody votes for their own comment; 1 point of comment score doesn't move user karma, because increasing karma just by commenting is undesirable.
Being a victim is exactly what I felt like when I was an MSFT customer. I shall remember that one :)
Isn’t this basically fuzzing?

Making sure it works at the business domain level is another thing entirely.
I never really got into Twitter. I could never understand the point of posts limited to 140 characters and my severe lack of self esteem means I live my life believing that nothing I say is worth hearing or in any way remotely interesting.

In saying that, every time I've tried to "do" Twitter, I just find myself in this space where I feel a mix of sadness, anger, hatred and other negative emotions because 95% of Twitter is either people assuming the worst in everyone, calling other people every horrible name conceivable or just generally being another awful person in a sea of awful people.

The fact that I've never quite "got" Twitter has meant that I feel no attachment to it, and don't care if I remove it from my life, so it's not like I'm losing any sleep over it. But, it also helps immensely that removing Twitter from my life is like cutting off a necrotising limb that you never needed to begin with.
Kids, this is why I did my best to avoid working on Payroll Systems at all costs. So far so good :)

>"It ruined my holiday period because I thought I'd paid out hundreds of thousands in error — I thought I had done something wrong,"

But, if you can manage the stress, I would think that position would be very secure.
> chrome

See https://www.cvedetails.com/vulnerability-list/vendor_id-1224... for a list of RCE vulnerabilities. I see a bunch of memory management problems there. Also note that chrome is likely much better tested than some other C++ project, and lots of tools are used to search for potential vulnerabilities or invalid memory use as well as fuzzing and crash reports from a large install base. I don’t know how this compares with IntelliJ/Java (which I also don’t particularly like).

I would expect other C++ applications to have a higher defect rate than chrome due to less testing/tooling but also likely a lower attack surface area.
> I guess we all eventually end up building a new DB UI

Very true. I've found Neo4j to be very useful as a note-taking app (or maybe more a mix of a mindmap and a knowledge graph?) and have been meaning to write a UI to better support that use case for a while now.
I wish we'd stop perpetuating this myth of "the time that's right for you".

Biology unfortunately or fortunately requires women to have healthy kids until a certain age, and the more women are aware of it the better for them (that is if they plan on having any)
WVU engineers creating software for aerobots to explore Venus
> It is surprising that nearly every solution out there aims to handle both authentication and authorization. We choose to strictly separate these and delegate identity to established third parties or our customers[0].

It is a trade-off. Both the authentication and authorization process are typically customized to business requirements, and splitting them apart gives more flexibility in customizing them.

However, the expectation is often that these are both represented to the user as part of the same cohesive experience. Independent implementations of authentication and authorization can make this more challenging.

There is also the expectation that an authentication product provide services like registration and account management. Account management often includes controlling any granted delegated authorizations, which mandates additional coupling between the two systems.
This is exactly how I've been feeling recently. I'm not entirely unsociable, but I'm happiest when pursuing my interests. From time to time, I find one or two people with a similar level of knowledge to mine to talk to, but no long term friends of this kind. Sharing stuff on Hacker News is an option, sure, but there's a limit to the amount of trust you can afford here, and a blog post isn't the most expedient way to explore complicated ideas.
He doesn't make even a single throwaway comment on the process of throwing black or white potsherds into an urn to decide whether someone shall be banned from the city of Athens, i.e. the original meaning of ostracism? Because AFAICS that would be pretty literally (actual literally-literally) about downvote etiquette.
Yeah, that's how we were taught it anyway. Nodes are added to a priority queue as they're discovered while being popped off the queue in order. From the title I was expecting something like going from naive Dijkstra via A* to an optimized jump point search or something.

That said, the title aside, it's still a worthwhile post. It's sometimes easy to accidentally nuke your algorithm's performance with an innocent-looking function call or operation that's secretly turning it quadratic or worse.
UK shops fear gaps on shelves as new Brexit import rules hit
I'm very much an introvert.

I like people, and I like new venues and adventures. I can do quite well at socializing. I have a fairly wide social graph (in the meatspace).

But it is tiring for me, as is a lot of stimuli. Just the way my brain works. I won't go into why. It just is, and will never be fixed; only accepted.

I used to work for a Japanese company, and made many, many trips to Tokyo. I went regularly, for over 20 years.

Tokyo is "External Stimuli Central." I would always come back from these trips, utterly exhausted.
> The problem is, of course, that it increases rental profiteering, and that it caters to rich international tourists, not residents.

If I have a property, I can choose to let someone stay at my property for money. AirBnB facilitates this. This makes my property valuable as a result. The homeowners benefit as do people who need a place to stay. This is progress and occurs any time anyone creates a product or technology that creates value. What pathologies? Homes rightly appreciating in value due to a new revenue stream opened up for homeowners?
Ask HN: In 2022, Is the “dot com” TLD still worth it?
If you ever tried to register a beautiful/meaningful/short ".com" domain, you are most likely to find it is already taken. If you get a green "Domain Available", it's probably you made a typo or your cat was walking on your keyboard while you were busy typing..

So, from a "business/brand-awareness" perspective, does still the dot com TLD make a big difference compared to other less-attractive TLDs? I think this should have a different answer for website-based businesses and mobile-app-based (where most apps may ONLY need a domain name for consuming APIs?), PWA is another case in the middle?

Let's take for example some famous/successful services which are not .COMed, eg; "zoom.us", "notion.so", "telegram.org"..etc, Do you think people still notice or care about these services not being ".com" (although the first two already own their .com TLD).

What are good alternatives: ".io",".ai" for techy startups, ".app" for mobile apps & PWA? What about so-called "domain hacks" where you can read the full name of your brand when adding the appropriate TLD, eg: "youtu.be", "instagr.am", "every.one", "del.icio.us".
And yet we are probably multiple decades away from 90% adoption and it is quite possible given the level of coordination required that we may never get to 100% adoption. We are more than 20 years in and I am still required to support ipv4 if I want to reach the market reliably while ipv6 has little incentive for me to support other than a general sense of goodwill/responsibility and the vague hope that someday it will result in an even larger network.

We need an expanded address space. The ipv6 rollout is proving to be one of the least effective ways to get it in practical terms.
Cities with shittier weather, e.g. in the Northeast or upper Midwest, don’t seem to have this problem as much. Much less antisocial behavior than in California cities, which seem uniquely bad in this respect.
> The mental model is not even difficult - you can describe it in a sentence or two.

> * Each commit is a snapshot of your code at a certain point.
> That's it.

Unfortunately, it's a bit more nuanced than that. What you described is only git's storage format. Git operations and UI unfortunately isn't consistent with that model. Take for example, interactive rebasing. By your definition, if we delete a commit, the subsequent commits should remain unchanged - because commits are only snapshots after all. But that isn't what happens. The change introduced by that commit gets deleted from all subsequent commit. Commits are treated as diffs here.

Git UI switches between snapshot and diff model quite often. Merges and rebases are all patch operations. Novice users can get away with being oblivious to this change for most operations till merges. But rebases require you to be aware of it. Even for experienced git users, large multi-commit interactive rebases are hard because git simply hides all the nuances of patching (you are better off rebasing in small chunks). This becomes immediately clear when you use a tool like quilt or stgit. In my opinion, this is something that prevents beginners from going beyond clone-commit-merge workflow and being able to create beautiful commit history like that of the kernel.
I'm just toast after 8 hours of work. And if i shift something to another day it's just way too much.

I can shift to free days which can even feel relaxing. But that means gifting my employer the best hours of my free days too.
> the lowest sum possible that results from traversing a grid from one corner to the other, where the possible moves are going right, down or up by one.

But, you just need the sum, not the path. There's no need for a shortest path strategy.
oh yeah it goes without saying that Python dicts and sets are my AOC bread and butter :D
Check out my free open source book "A bitmappers companion" its a reference book about 2d graphics algorithms with code examples in Rust. https://github.com/epilys/bitmappers-companion
It took me a while to realise what it was that bothered me, but yes there's a real lack of 'high street shopping' and markets type organisation from what I've seen in North America - instead drive to a big square ~car park~ 'lot' surrounded by 'big box stores'. Everything scaled up.

If you like it fine, can't really say either's objectively better, it's just really quite different and I suppose you likes what you grow up with or are used to.
omg, I did not even know we have "karma" here (never looked at my "profile") I actually read HN to get away from stuff like that. Funny, perhaps people come to HN as most people here do not pay attention to those items.
From the article:

"So why are Indian Brahmins doing better in business abroad? One answer is that because business in India favours those with established networks, talented Brahmins have tended to emigrate. A tradition of bookishness has made it easier for them to pass exams and enter the countries with the greatest opportunities."

Merchant castes don't only lead retail businesses.
"A study from 2010 of the country’s 1,000 biggest companies found that some 93% of board members came from “forward” castes."
Coming home from Tokyo to New York in 2018 was depressing. You get so used to living in a dysfunctional society that you forget it's dysfunctional, but getting off the plane at JFK, I was reminded of Biden's comment that our airports are like stepping into a third world country [0]. The next week in New York, I felt like I saw nothing but broken things and lost people.

How many places in America:

* have good schools and offices within walking distance
* have such good public transport that you don't need a car
* provide easy access to nature and parks
* are affordable to midde-class people?

I think the answer might be zero places -- those that meet the first three criteria (Berkeley, parts of NYC, and Seattle) don't meet the fourth.

[0] https://abc7ny.com/laguardia-airport-improvements-renovation... -- though technically he was talking about LaGuardia
Can I produce and sell this device like my?
Looks like license allow me to do it.
Brain computer interface for raspberry pi
How do mobile phones affect city planning?
Don't freak out about a statistical variation. The trend is for wind power to increase and for coal power to decrease in Germany, so really the only interesting points in time are the first time when wind generated more than coal and the last time when coal generated more than wind. The first just happened in 2020, so freaking out about coal momentarily being on top in 2021 is pointless.
Belt squats are amazing. Time under tension versus a pure volume approach to hypertrophy just makes so much sense.
These are not glamourised.
I would say, a rocket engineer should definitely start with a simple rocket to be designed on their own - before proceeding to something modern and complex.

And I did not study rocket science, but in my CS studies we definitely started with the simple ("hello world") basics, too, before touching real systems, so I would think, they do likewise. Because it makes sense. How can you understand and design something complex, if you cannot even make a simple version of it?
Very interesting. Is the UI written with mobile in mind, or do you only use it in desktop settings (like work-related productivity)?
Good to see all the progress on Haiku. This might be a solution for a "modern windows 2000" from the discussion the other day.
Decades ago I made a resolution to never again make a new years resolution and instead just get stuff done that needs to be done. If I want to change something, I change it. No need to wait for a calendar date.
Villages in China all connected to broadband internet service
I was just going to mention Nomad, Consul et al. They’re maturing well and Nomad is light on resources.
I think it is also true that many of us use github or similar with a PR workflow rather than the way Torvalds and the Linux core maintainers use git.
There are many boroughs in London with a majority of households not owning a car - more than 60% in Islington, Hackey, Tower Hamlets, Camden, Westminster, City, with Haringey, Hammersmith/Fulham, Kensington/Chelsea, Newham, Southwark, Lambeth, Newham, being over 50% without a car.

Oddly the Isles of Scilly, which are tiny, and lack a proper vehicle ferry to the mainland, has about 50% of the population with a car or van. The furthest you could actually go would be able 2 miles.
Thanks for the feedback! I've had on my list writing a "mobile guide to OAuth" as well, because there's a lot to unpack there.

I attended this session at Identiverse 2021: https://identiverse.com/idv2021/session/SESBSMQ1FA07QHXBG/ I don't think the video was online, but as I recall his advice was:

* figure out your risk posture
* secure your bearer token if you are using it
* if you need higher levels of assurance, then use DPOP https://datatracker.ietf.org/doc/html/draft-ietf-oauth-dpop-04

The other thing to consider is whether you are first party or third party. If you are really using third party auth, then you should follow RFC 8252 as linked above and pop out to the system browser. Otherwise you may use a webview (because if you control both ends, the tradeoff in improved UI may be worth the increased risk).

Definitely agree on reading the specs. If you are interested in OAuth in general, it's worth reviewing the OAuth 2.1 doc, which is a work in progress but will consolidate a lot of best practices: https://datatracker.ietf.org/doc/draft-ietf-oauth-v2-1/
He has leadership material written all over him.
Goodbye 2021st
A few thoughts.

1. For me, being physical is important. It isn’t for everyone, but if it is for you, don’t ignore it. It brings perspective, clarity, and renewed energy.

I don’t enjoy the gym rat thing, though. For me, I’ve really loved tennis & climbing. I set myself goals in each and work up to them. I use them as toys to work on mental fitness. I’ve been surprised at how much it has helped in work & life.

2. I’ve worked with a bunch of very smart people right out of school who worry about perfection. One thing I have learned that’s helpful to point out is that the school format is great for teaching a lot of information fast, and measuring a certain type of achievement, school is not life. In fact, it’s counterproductive to work/adult life. A perspective shift is needed. Think of this as a developmental phase of life. Most people experience it.

In school, you are being trained to be a perfectionist. You get one shot, and then are judged, with finality. In this game, it’s worth it to overinvest in everything to maximize your one-shot score.

In life, you can generally control the clock, and the world offers multiple rounds. So, you can play with an idea over a long time, iterating it towards more and more usefulness / perfectness. Note that the real world is much messier than school, and often the problem itself changes over time. It’s important to let go of the idea that you’ve been trained on, that there is one perfect answer to each question.

“Perfect is the enemy of done” is a great quote here.

—

For your side projects, if I were you, I’d pick any one and just finish it. Not perfectly, just done. Enjoy the process, appreciate the result. Don’t judge yourself on the outcome as much as the process you used to get there.

Good luck!
> You'd probably be encapsulating "IPv5" traffic in IPv4 traffic towards known translation routers at ISP networks.

That's what 6to4 does. When enabled, it encapsulates IPv6 traffic in IPv4 packets and sends them towards a well-known anycast IPv4 address, and the return IPv6 traffic is sent towards a well-known anycast network, where a router encapsulates it in IPv4 packets and sends them towards the IPv4 address contained within the IPv6 address.

I find it amusing that all these "IPv5" proposals either cannot work, or do the same as something which already exists for IPv6 (and in this case, it works; I've used 6to4 for a while).
> Turns out Android refuses to use provided IPv4 DNS addresses if it got allocated an IPv6 address, and reverts to Google's own DNS servers.

That's strange, I haven't seen this happen to my devices at all, and my pihole is IPv4 only for now.

From what I can find online, it seems that this happens when Android is configured with an IPv6 address but the provided DNS server won't resolve AAAA queries. Allowing your DNS server to look up AAAA addresses would probably fix your problem?
If you like this, you may love the two season series /Patriot/ on Amazon Prime Video.
> Without having a way to store a whole nation's energy needs for several days or even weeks

That requirement makes no sense, though. Do you foresee a massive volcanic eruption that there will be darkness for several weeks? Because it's sort of fact of life that the sun always rises tomorrow. Therefore asking for 100% of storage for weeks never made any sense.
Wow. What industry is this?
> Do you avoid posting opinions that will start a shitfight?

This. I don't find it difficult - in the same way that I wouldn't walk into an office or a bar and shout something divisive, I just avoid talking about those kinds of things. I just steer clear of politics, really.
Calling any discussion on caste an attempt to "make a political point" is patently poor intellectualism, particularly when you're not exactly refuting any of the points in the article.

Scratch but a few inches beneath any of the supposed critiques of this articles, in this thread, and we will find precisely the kind of ingrained casteism that pervades the upper caste mentality, convincing them that they are supposedly meritocratic and superior to the "quota" lower castes.

Casteists are not the intellectual equals of their modern critics and it shows in the way they try to avoid discussion on it.