skysight-inc/HackerNews huggingface dataset:
You don't need to dictate a standard set of permissions, you just need to remove a single very common anti-pattern called "rights amplification".

Why is a program able to concoct a random string that conveys no authority, into a file handle that conveys monstrous authority potentially over an entire operating system, ie. file_open : string -> File.

That's just crazy if you think about it: a program that only has access to a string can amplify its own permissions into access to your passwords file. This anti-pattern is unfortunately quite pervasive, but it's a library design issue that can be tackled in most existing languages by using better object oriented-design: don't use primitive types, use more domain specific types, and don't expose stdlib functions whereby code can convert an object that conveys few permissions into one that conveys more permissions.

This means deeper parts of a program necessarily have fewer permissions, and the top-level/entry point typically has the most permissions. It makes maintenance and auditing easier to boot.
We’ve been hearing about the genocide and reeducation camps in Xinjiang for many years. How long did they actually cover it up for? I believe they actually post propaganda videos from the reeducation camps themselves.
And the text editor Brief [1]. I used this in my first uni holiday job in 1988...

[1] https://en.wikipedia.org/wiki/Brief_(text_editor)

I still miss its keystrokes: one 'Home' for start of line, a second 'Home' for top of page, a third 'Home' for start of file.
On Pixel 3 or higher phone and some other Android phones you can add a boarding pass to the Google Pay wallet by taking a screenshot of the boarding pass. Once you take the screenshot it will be recognized as a boarding pass and an option to add it to your wallet will appear.
Wheatstone Bridge: A (Not So) Honorable History
> The data itself is quite decentralized, at least on the popular blockchains, but that’s about where the decentralization ends.

Yes. Web2 is where users generate content and generate profit for companies.

Web3 is where companies went further and offload storage/compute costs to users, while maintaining control over services/apis. It's like Youtube where videos are hosted by users but Google gets the money.
I did not know there was a name for this[1].

I am regularly using a T400 which started life as a Lenovo 3000 N100.[2]

Upgrades since then include a 2 TB SSD, 3.06 Ghz CPU, and WiFi.

I do enjoy tinkering, but I also like the keyboard :-)

[1]: https://en.wikipedia.org/wiki/Ship_of_Theseus

[2]: https://www.nu42.com/2016/12/another-one-bites-the-dust.html
>if SHA256 proves to be insecure

slight pedantism here, but "when" not "if"
Do they have one for father's brother's nephew's cousin's former roommate?
An Ode to Ruby
Plus, all it prevents Bitcoin from getting attacked with the 51% is that maintaining the network is more profitable than breaking it. As soon as an agent has some objective other than direct profit from Bitcoin, it won't stand a chance.
I failed a subject (operating systems) because I couldn't manuever the code in Eclipse. I once quit Android development because of Eclipse, and came back because they switched to Android Studio. I got 300 upvotes on a topic that was just debugging wonky Eclipse behavior [1]. I wrote a poem once on Facebook about how much I hated Eclipse, and to my surprise I found a website dedicated to hating Eclipse.

Normally I believe a bad tool is better than no tool, but Eclipse was just such an unusually bad tool. It's a benchmark of how bad open source tools can get. I give money to Jetbrains because I hope we never go to such a dark place again.

[1] https://stackoverflow.com/a/15761439/1402526
I'm also using an X220. I bought an X1 as a potential replacement but the trackpoint is unusable and the keyboard is a big step down. The X220 battery only lasts about 15 minutes though, so I need to keep it plugged in. I'd like to find a replacement battery but am not enthusiastic about prying the housing apart to install new cells or buying a knockoff from a faraway land which might start a fire.
"influenced" is a much weaker claim than "controlled". Yes, there's a commercial influence, but does that prevent studies that are against those commercial interests from being conducted or those commercial studies from being criticised: no it doesn't.
The T430 was the machine that hooked me on to ThinkPads almost 20 years ago. Having tried many newer models since then, including the X1 Extreme I use for work nowadays, I agree that they just don't make them as they used to.

Ever since the Lenovo acquisition in particular, quality has gone down substantially, to the point where they don't feel special at all, and are on par with other Chinese mass produced brands. For the exorbitant prices it still retails for, you'd think that coil whine wouldn't be an issue, and that TrackPoint drift would be fixed after all these years.
It should have, the only reference to colonialism is in the headline
It's not specific to one Chinese Language or even just Chinese.
> At dev time, you generate a lock file of the hashes of your dependencies.

So. At dev time. You download random files from random urls via Deno.

Compared to: At dev time you download files from a trusted repository. https://news.ycombinator.com/item?id=29871936
The only source of statistics is the party, but that's not the only source of information. If the healthcare system was collapsing in China due to COVID megadeaths, we'd know.
My favourite is when you're a solopreneur working in your own repos and still asking yourself "who wrote this shit?!"
Learnings over 7 years at Pinterest (Part I)
As soon as we learn how to cultivate some good quality meat in-vitro, we will stop killing animals and start to pretend to be different from the barbaric previous generations.

That's what people do in every ethical aspect, we circumvent it and pretend it's easy to solve, and then criticize the people that can't circumvent it due to some environmental issue. When that people is on the past, there isn't even a problem with this.
This specific use case was in fact one of the motivations for introducing optional arguments back in C# 4.
It has some unique aspects, they try to introduce ad-hoc version of a monetary system, regulation and so on on top of it. These systems and regulatory institutions (which are private) emerge almost spontaneously, plus there is a huge marketing hype surrounding it, even ethical and political rationalizations.

Another aspect is how quickly it becomes centralized and privately controlled. And then there is a whole story about social media hype and anxiety. It also had recent heavy real world effects: The protestors in Kazakhstan have shut down a large bitcoin facility.

It's an interesting experiment to say the least. Sure there are parallels to previous instances in history, which is why many of us have been very critical of it, but it seems to be a unique blend.
Common technique is to specify address for reports that bounces. Bonus points when bounce comes from the same domain and generates another report, engaging in eternal ping-pong every 24h. /s
Internet Archive APIs
I would recommend deleting your twitter account. In all sincerity it seems to be having a negative effect on your mental health.
How did you manage to get a race angle into this? And which "designs" and "covenants" are you talking about?
Seems to me what you described is a cyclist passing on the inside or traveling in the wrong direction if there was time for the other driver to wave thanks! This would put the responsibility squarely on the cyclists shoulders. Chances are, if there was an exchange between the cyclist and the other car's driver, the car owners insurance will pay out unless you recorded their license plate number and notify your local authority as a witness, but it sounds to me like you believe the cyclist is the victim so IDK.

I was always taught to never wave or otherwise indicate to another driver to proceed but slowing down is fine, and never ever ever EVER act upon the invitation or waiving from a pedestrian to proceed(Such as a person waiting at a crosswalk that you stop for that waives you to go) as the person in the vehicle is always in charge of that situation. I know this was not your situation but feel it is relevant enough to mention.
sorry to ask, as I'm sure it's just me not getting the joke, but are you referring to "green ink" in terms of this[0] or something else?

[0] https://rationalwiki.org/wiki/Green_ink
Only because the NFT marketplace is just the Greater Fool Theory at work.
I really like it, great work!

It would be great if [Enter]/[Space] would clear a wrongly typed word, maybe with some visual indication that it wasn't typed correctly and maybe also show the mistyped word. Having to delete the word because of a single mistake really takes you out of the flow, and the timer doesn't reset till you delete and retype the word correctly.

Displaying the target ms/character for the specified word count might also be beneficial to quantify what you're working toward.
Obviously just an anecdote but reckless driving and road rage got way worse during the pandemic. When the roads were cleared back in March/April 2020 I saw a ton of people driving like maniacs, 100+ MPH in Columbus on I-71 and weaving in and out of traffic, drifting into another lane with no signal, lots of just really bad behavior.

Idk why but combined with the dirt bike gangs and riots and protests it felt like we were tolerating lawlessness in a way that we hadn’t before. People just realized there weren’t consequences and started doing crazy things.
>AFAIK, a lot of package managers already cache local copies

But this cache is usually not easily transferable to someone compared to them just cloning a repo.

>sorry but i don't follow

You have the source code to all of the dependencies in your application.

>Are you working alone?

How many forks of a dependency do you use? Just using the master branch and upgrading along that should be good enough for 99% of your dependency.
> True, but what I'm saying is there's no reason to mistrust the hospital

That doesn't matter _if people don't trust the hospitals_. Whether or not there's a reason for it is insignificant.

> as I've not seen the alleged behaviour at all

As an aside, one anecdote doesn't mean that there's no reason to mistrust the hospital. I have elderly relatives in care homes, and I've not seen them abused. That doesn't mean there's not a problem with abuse in care homes here in the UK
Scams occurred before cryptocurrency
This brings us back to the fact that Deno loads random files from random URLs with no way to change it. https://news.ycombinator.com/item?id=29871936
It may vary a lot of course but I'd say it's generally worse... And the difference gets brutal if the startup gets successful and you get to exercise stock options. However, money isn't everything... Mental stability is priceless.
One that my brain always had a hard time with was "callee-saved" and "caller-saved" registers. I wish more people used "call preserved" and "call clobbered" instead.
For other items that native English speakers may not know - I believe in some Indian languages there are different nouns for your uncle and aunt, depending if they are on your father's or mother's side.
Looks like an example of the emerging genre of post-truth-quasi-parody, where if goal A fails then it is represented as goal B.

Goal A is to dupe the most gullible of cryptozealots, trying to gain financially, goal B is to mock them, gaining exposure.

Win-kinda-win.
Yes, my domain is one such on the recipient end.
Another anecdote: In my home town, a doctor took the government funding to open a covid centre. She then only admitted patients that were mild cases and had chances of survival, for those who had little chance of surviving she would not admit them and send them home. One might think that maybe she was being smart in triaging the patients, but I know her personally and her only motive was money.... Because relatives are less likely to pay for a dead patient than they are for someone who came home alive.

Extremely shameful but not surprising.
Reeducation camps are not covered up. The government has released plenty of documents describing them, e.g. http://www.xinhuanet.com/politics/2019-03/18/c_1124247196.ht...
> this exploit requires run permission with any argument and write permission to any directory. It allows malicious script to escape sandbox and execute arbitrary code outside of it.

I suppose you wrote something wrong here and I'm interested in knowing what.

Because as it stands now I read it falls down to: "If you open the permission system up extremely wide you can get exploited."

Alternatively, after thinking for a couple of minutes I can read it as "if you simultaneously allow run permission with anything and write permission with anything".

In the last case it is slightly more problematic, but if one allows a script to execute anything that is itself a huge red flag.

... and on Node this red flag is always flying by default.
If you hang around long enough you'll end up with code you once wrote that was maybe a quick fix, maybe you thought it was brilliant, but now appears to you as a steaming pile of crap.

Sometimes it may however still be the best solution but your future self was unable to figure out why because your former self was too lazy to properly document the code.
How much fiat money has been actually used to buy bitcoin? It doesn't seem to have made a dent or caused major uproar despite repeatedly crashing. Which imho means that people buying btc are more shrewd than it is usually assumed
I completely agree, and I think it's gotten out of control.

Lately it has become vogue to attribute human intelligence to slime molds because they do complex things like solve mazes. Then that behavior gets put side by side with, say, mice trying to solve mazes.

Perhaps the most egregious, in my opinion, is the way people unreflectively attribute terms to plants. I hate being a nerd about definitions, but sometimes playing and joking around with definitions serves to embed fundamental misunderstandings about the natural world.

Here at hn and elsewhere, I've seen people insist that plants can "feel", that they "communicate" and are "conscious", very intentionally attempting to insist that it's same in the deepest sense as what humans do.
That kind of fraud can occur because you have a socialized system interfacing with a non-socialized one. The government is paying the costs, but they don’t actually have much control over or oversight of the care. It is not like Australia where the government is all in by funding the hospitals and doctors directly.
To me VDI is the way to go. I want my development machine to be in the cloud and always running.

I want a lightweight notebook that only takes into consideration screen, keyboard and battery that I can connect to my virtual desktop from anywhere.

I want a dedicated desk at home with a $40 PCoIP thin client purchased used on EBay hooked up to my multiple monitors that connects to the same virtual desktop.

With this you can truly work from anywhere even if your notebook is stolen or dies. With AWS Workspaces you can be as redundant as you want, you can create a daily snapshot of your Workspace if you want and launch it in any region if your primary region goes down.
Why do we use DeDRM tools or equivalent? to be able to move a file from one ereader to another, from another brand; to feel that we "own" ebooks we have "bought"; to be sure that we keep ebooks in case the booksellers goes off-market; to be able to give and ebook we bought to a few friends.

What does kindle and other proprietary DRMs offer? none of it.

What do companies adopting Readium LCP offer? all of the above.

The original https://github.com/apprenticeharper/DeDRM_tools is still open, everybody can use it, Amazon, Adobe, B&N, Kobo don't bother, so it can be used, updated without bits of Readium LCP. LCP which is moving in the right direction IMO: being able to give an ebook to a friend by simply giving the password is great.

Plus, why do some people want to keep and share with the world ebooks they had for free from a public library: they totally crush the only solution which makes litterature available to everyone: if this spreads, libraries will not be able to get ebooks from major publishers anymore. Is it what they really want?
7. Primary use-value of crypto is to facilitate payments for ramsomware and other illegal activity.
Hmm so would you say omicron evolved naturally without human intervention?
It's trying to explain NFS for people who don't know how they work. If you already know it, then yes, it's nothing new.
I’m mostly just surprised that these types of fossils did not end up as heirlooms covered in gold and jewels.

Does anything like that exist?
Indeed, I think the deal should be: You go to medical school for free, then you work for the government for a nice professional salary. Malpractice insurance can be a government function.

An interesting side effect might be to change the demographics of who can become a doctor, maybe attracting more people from middle class or blue collar backgrounds.
I can buy a high spec showhorse for $40k, or a new mid range sedan for $40k. That doesn't mean that the maxed out showhorse will work for commuting to work every day.
To give you an opinion from someone on the ground in Hong Kong, the zero case policy is very real, and it's strangling the city. Many people are unhappy with it. With an at minimum two week quarantine when you come back to Hong Kong, it's nearly impossible to leave. I myself have three weeks of quarantine coming up soon.

The result of these harsh restrictions is that there haven't been major outbreaks, I think the worst we ever got was about 120 infections daily, and only 213 deaths overall, with the last one being on September 14th.

The downside of this, is that the vaccination rate in HK is very low, because there's no difference between being vaccinated or not. You're subject to the same local restrictions, and subject to the same length of quarantine when you come back.

Vaccination rate spiked up recently, because a new "wave" has started. Newly discovered cases spiked to 38, and the government announced a new two week lock down to squash it. Ironically, part of the new cluster revolves around a party thrown by some government officials and legislative counsel members.

Note: I'm personally very unhappy with the situation in Hong Kong, but try to refer from giving my personal opinion, so it's mostly just fact based.
Ask HN: How to learn about text editor architectures and implementations?
I am a self taught developer. Its been more than 3 years. I know decent JavaScript, and full-stack developement knowledge. I recently started admiring text editors. I use vscode. I have also used VIM and EMACS. I tried reading their source code, also of atom, brackets, light table etc.

Honestly I don't understand anything. I am not able to make sense of the data flow and the architecture. I want to understand how text editors work under the hood. Also I want to understand the plugable architecture they use to extend the functionalities of the editor.

Please suggest me any articles, videos, conferences, blogs, where I can pick up the concepts. I have been troubled by this lack of knowledge and unclear path to access it.

Edit:
Reasons for this quest:
I am not here to create yet another text editor. But I do understand that they are one of the complex peice of software which still is under constant improvisation and developement. Also text processing is the one of the core concepts of computer science. A lot of algorithm and data structure knowledge is hidden inside it. Besides, I feel through real world projects one can learn alot about core computer science foundations.
I wonder what Gary Larson will do with this discovery...
32 cores, not 64.
For what it's worth there hasn't been a death in Western Australia since May 3rd 2020 [0].

[0] https://en.wikipedia.org/wiki/Statistics_of_the_COVID-19_pan...
> And so quite a lot of readers think there is some super duper smart guy offering this cool hidden insight that they can easily use

Most "cool hidden insight" can be attributed more to the autor's writing skill (and acting skill if it's youtube talking heads) than to any actual useful info inside. Do not let yourself be mislead by Mr Stross' profession, most internet "experts" are even worse than that. And they don't even admit they're fiction writers.
> This is a sarcastic post obviously

Well, stop. You also submitted an editorialized title. Don't do that, either.
Clearly you haven't heard of HasThisTypePatternTriedToSneakInSomeGenericOrParameterizedTypePatternMatchingStuffAnywhereVisitor

http://dev.eclipse.org/viewcvs/index.cgi/org.aspectj/modules...
But the vast majority would be.
> 1. It's not a currency. It's an asset;

Well sort of both, but many of us use exclusively as currency. For instance, I generally only hold it long enough to make some bitpay transactions to avoid CC fees.

2. Reversible transactions for fiat currencies is a feature not a bug;

Feature of some fiat transactions, but you can avoid that with fiat too. Some people WANT irreversibility, but you're free to use fiat instead if you like.

3. People who can't manage passwords won't be able to manage a wallet so mass appeal is always going to be limited;

OK fine, they needn't use crypto.

4. Crypto has its own vulnerabilities (eg 51% attack);

If 51% militantly attack the treasury and fed it won't exist either.

5. This whole system is hugely energy wasteful; and (here's the big one)

Your beef is with externalities of electricity. I don't like that either. Lets fix that rather than play whack-a-mole with whatever use of electricity you disapprove of.

6. Government action could shut down crypto tomorrow so how robust is it really?

All I can say is good luck with that.
Whoever made the IPO price suggestion in inv. bank must have been promoted really well and made a great bank then. I mean dumping to retail on IPO is the way for them, just a rare old example. New ones are much much better for them, see, UBER, ABNB, COIN, PINS so on.
How does this increase the utility of what is essentially a pointer written on a global bulletin board? (I'm not being rhetorical -- I'm not sure why the immutability of the thing pointed to increases the utility of the NFT pointer.)
Zero COVID prevented the virus from becoming endemic in China (look up the definition of endemic). Once it does, you’re right that it seems like putting the genie back in the bottle is impossible - once COVID has spread to wildlife like deer and cats it seems hard to imagine a method of wiping it out within that country’s borders.

We know several other countries with less strict policies than China maintained zero COVID for quite some time, or states within those countries (Australia for instance had COVID outbreaks they successfully confined to one or two states). Once delta hit, it became too difficult for those countries to continue, but we can see China is more authoritarian and their stricter measures may still be effective for now.
Helpfulness at work is hurting your job performance
That is quite a uncharitable read. I understand they made mistakes, but so does every technology in the beginning. They also had the unenviable task of coming up with how to behave in a community. They are trying to do something new, and had some failures which are obvious in hindsight. But that should not be used to bash in their heads on each instance. Especially because they have shown consistently now that they understand the mistake and have not repeated it.
Give me enough pressure and I can forget about eating for the entire day. The feeling just doesn't register, I will not be hungry at all.