skysight-inc/HackerNews huggingface dataset:
Here’s a question for you. Which makes more BTC: (1) the world today, (2) an alternate reality where the mining algorithm is the same but it’s being run on Matryoshka brains enveloping every star in the universe (all operating at the Bekenstein bound for efficiency and which can somehow communicate instantly)?

The answer is “they are the same”.

> Land prices near settlements will be high.

Irrelevant, the cost of getting stuff far away from a settlement is higher, even ignoring things like cleaning the panels and replacing obsolete compute. (Plus for your mining rig you need to get internet to it, which is even more expensive and at that point you should be asking serious questions about installing a power line instead of a data line, and yes people already suggest that for the moon with microwaves etc., I’ve had that conversation at least a decade before BTC was even invented).

Whenever the cost of getting to uninhabited places (in a controlled way not e.g. messages in bottles or crashes, which risk the destruction of your equipment and are unlikely to result in good PV orientation) has been lower in the past, people move to those places and make a new community and suddenly it’s no longer far from a settlement.

Also, literal profitable businesses literally put literal PV on literal rooftops literally at zero cost to the people under them and literally fund this by literally selling their output to the people living literally under them, and have done literally for years now.

QED the cost is not prohibitive, money can be made this way because it is already being made this way.

> using all that passive cooling and uninterrupted sunlight to generate coins

The only cooling on the moon is because the sunlight is not uninterrupted. The vacuum of space is a fantastic insulator.

Now a second question. Have you heard of Dutch disease?

Because even if you go back to the setup in the first question and change it to make whatever number of BTC you fancy, money just does not function in the way you’re expecting it to.

No get-rich-quick scheme can be scaled up to a community, even in the rare cases that they aren’t scams. And trying to, breaks stuff.

At best, even if BTC (or whatever cryptocurrency you want) had no flaws and was a perfect system, all money is just a token of wealth, it is not wealth itself.
Why does it matter if compile time is 100ms or 300ms? At even a second, that’s going to be so negligible in the context of code-compile-debug work. Especially if something like a flash download is involved.
My experience begs to differ. Until the original copyright owner files the complain with Apple (as author was suggested to do when he mentioned other Wordle clones), Apple may do nothing. Especially, when copyright violation is not obvious.
I've recently grown to like nix. When it works its awesome. When it doesnt work though prepare to get your hands dirty fixing some packages.

https://github.com/NixOS/nix/issues/6113
https://github.com/NixOS/nixpkgs/pull/160554

The ability to compile everything simply just from one file is amazingly powerful though, and makes sure its all isolated. With NixOS being able to define whole system with one file is also extremely powerful. I bet valve's steamos wouldve been better with nixos as base and flatpak for users to install apps with, and i say this as someome who has used arch for over 10 years. Nix makes development of complex systems easier.

Since the derivations can be cached, your builds will also be faster.
Not really what I'm suggesting; many of the responses (even rapid ones) could be valuable and accurate.

But regardless, it can make it difficult for all opinions to feel heard (and that can lead to other problems).
> So in some sense the language is a decent filter for people who won't like the inevitable rest anyways.

I'm not saying i'd like to package complex systems with nix/guix, but i certainly would use them more to package my own projects if the ecosystem had better docs and error messages in regards to typing/syntax.

I'm ready to carefully read through a 20 pages manual if that's what it takes, but i personally find the documentation and diagnostics of both projects to be sub-par compared to my expectations (looks really clear on paper, now why doesn't my declaration work?). Granted, i'm not a skilled engineer so maybe i'm not your target audience, but i believe as an amateur programmer/sysadmin i'm part of the target audience to package anything i find useful and/or my own programs.
Mark Zuckerberg: Young people are just smarter.
Probably not much, Russia is likely to annex Eastern parts of Ukraine. Germany will continue with NS2 as this winter have proven there really isn't other options. Some political talk and maybe some sanctions will go on for a while.
I have a theory on JIRA - or rather on Project Management.

So PM is supposed to be three things in one - planning, monitoring and adjusting. Now "true (scotsman) leadership" constantly keeps adjusting plans to meet changes in the environment.

But usually this is too complex

In addition do not co-ordinate future development. that's not like military planning - soldiers do not say "we are going to invent a new rifle then be at the rooftop at 6pm ready to fire it"

only co-ordinate with what you have
Why would somebody want to use this over nvi, elvis, or the original BSD vi?

(I assume that people who are interested in features already know where to find (Neo)Vim.)
This one is a good example: https://googleprojectzero.blogspot.com/2021/12/a-deep-dive-i...

Really worth the read, it was quite eye-opening.

> JBIG2 doesn't have scripting capabilities, but when combined with a vulnerability, it does have the ability to emulate circuits of arbitrary logic gates operating on arbitrary memory. So why not just use that to build your own computer architecture and script that!? That's exactly what this exploit does. Using over 70,000 segment commands defining logical bit operations, they define a small computer architecture with features such as registers and a full 64-bit adder and comparator which they use to search memory and perform arithmetic operations. It's not as fast as Javascript, but it's fundamentally computationally equivalent.

> The bootstrapping operations for the sandbox escape exploit are written to run on this logic circuit and the whole thing runs in this weird, emulated environment created out of a single decompression pass through a JBIG2 stream. It's pretty incredible, and at the same time, pretty terrifying.
In Spanish, "ch" and "ll" stopped being considered a single character for sorting purposes in 1994. In have some dictionaries printed before that date, and I find them quite confusing...
From the article:

> In December, security researchers at Google analyzed a zero-click exploit they said was developed by NSO Group, which could be used to break into an iPhone by sending someone a fake GIF image through iMessage.

And the thread from back then:

https://news.ycombinator.com/item?id=29568625

That Project Zero blog post lays out the details under the "One weird trick" header.
What's being removed in C23 is the ancient K&R syntax for function definitions:

int max(a, b)
int a, b;
{
return a>b?a:b;
}

My understanding is that C23 does not change the meaning of function declarations. So "void foo();" remains a declaration of a function accepting an unknown number of parameters.
Yes, the nix store essentially acts as a cache. Nix can access "substituters" (e.g. remote nix stores/caches) over SSH. If you run nix-serve that's what cache.nixos.org is using (nix store over HTTP). [1]

If you enable the "keep-outputs" and "keep-derivations" in your Nix config then your local nix store should keep anything it used until you manually clean out old derivations (assuming you aren't accessing the tarballs via some ---impure method).

An easier option is to use a tool/service like cachix [2] to run your own repository which can be used just like the normal cache.nixos.org.

[1] https://nixos.wiki/wiki/Binary_Cache

[2] https://www.cachix.org/
I was tempted to try this but I'm fed up with getting spam from US-based companies so I'll only jump on board if they either comply with GDPR or otherwise tell a really good privacy story. Sadly that doesn't seem to be the case here, with a paltry privacy policy hidden even further out of sight than usual and no promises about handling data at the point of capture.

Sure, I could sign up with a temporary email address to try it out, but why invest that effort if I know that I'm not going to trust them if I become a regular user?
I think that ship has sailed for good. Thanks to Covid I now know that remote work is the perk I never knew I wanted. I think a lot of other people are in the same situation. If they want to bring people back to the city they might consider converting those offices to housing. NYC would also do well to tax unoccupied stores and businesses. Even before the pandemic you could spot buildings with multiple unfinished or unoccupied floors at dusk, the landlords just write off the depreciation and let them sit empty while hoping for a Saudi prince or Russian tycoon to drop them a large payday down the road. Covid isn’t going away, they are never going to be able to pack people in as the was the norm in NYC, the NYC economics need to adjust for a world where you need to see daylight between people and have proper airflow.
Apple, or Microsoft, or Samsung, or Ubuntu, or Google, or whoever can do all the system level bulletproofing they want. People will still write apps. And those apps, probably upwards of 99.999999% of them will be unsafe.

It would take a sea change in the mindsets of software engineers globally to centralize the software development process around a security mindset. That's not going to happen unfortunately. The vast majority of us have neither the expertise, nor the time, to develop 100% secure code. The best most of us conscientious types can do is to provide comprehensive monitoring, so that a user can use those tools to know if and when something is amiss.
> This only evens out by age 40

I've read 18 but I forget the source.
Can gold be created from other elements? (2014)
Are you talking about Australia Post? If so, the numbers I’m finding are $27-$28/h part time gigs that include leave etc. Are you seeing different numbers or have I got the wrong company?
The East Side Access is also a project that would never be built in Europe. What they should've done is built a through-tunnel through Manhattan connecting Long Island Railroad and New Jersey Transit, with two or three smaller stations across midtown.

Basically, instead of ESA and (ultimately cancelled) Gateway projects, calling for new tunnels connecting to giant carvern terminuses in the city, u connect these projects into one long tunnel without terminuses.

A terminus requires a lot of platforms and tracks because trains need to get completely emptied and turned around. If you stop at multiple stops and terminate at the other end of the city, you can do that a that a place where's plenty of space (or multiple different points). You also spread the passenger loads across multiple stations, meaning less passenger flow per station, less dwell time for trains (=higher frequency), and people will be closer to where they need to go (i.e. you can connect to all subway lines in Manhattan).
Yep it’s usually that or body parsers, that sort of thing.
> there must be a way for a user to fulfill the expectation that they can select "Linux" instead of "Mac" and "Windows" when downloading software

There's already established ways to do that such as AppImage, which has bonus points (compared to other solutions) for PGP signatures and differential (delta) upgrades. What's lacking is proper desktop environment integration for an ~/Apps folder like you have on MacOS where this pattern of one-file-per-app has been established for longer.

If you want to go one step further, 0install would make it possible to not even have to choose between "Mac", "Windows" and "Linux" on the download page, which is kind of amazing in a way.
Embedded environments are specific and esoteric enough that compiler portability is the least of your concern when migrating code from one platform to the other.
"The rise in CO2 will destroy everything" is an unfounded assumption, remnant of the CleanTech PR "science", which unfortunately a lot of scientists are still hostage to. Unfortunately, we'll need to wait until that generation dies out and the new shale funded scientists replace them... but these short term things will continue to happen. We still need to think in much longer terms if we are to think about protecting life on earth. Increased CO2 will mean plants will grow bigger and faster, this growth in biomass will increase biomass of all other creatures. Humans will not only survive in it, but will thrive... and so will many others. Yes, some will go extinct but that's a given. Protecting unviable species just for the sake of it is not a good use of resources, specially considering that the other option will inevitably lead to extinction of all life in the distant future... much earlier than it should.
It wouldn't be called a loophole if it was legitimate. Loophole implies there's some kind of something wrong with it. The fact that you can't quite point out what it is is what makes it a loophole.
Options:

* Go into academia and publish often. This will not pay well but you can do ok and you can enter the corporate world at a later time for a high salary but it will feel like working with children.

* Become a military officer. This is a highly focused lifestyle befitting an operationally minded person who lives in the moment with constant stress balanced against a cool resolve. If you want to enter senior management you will become a short term academic at CGSC and the war college in addition to your prior fast paced life. To summarize the military life is to condense real world career struggles into a quarter of the time, plus life and death consequences, but without the fear of becoming spontaneously unemployed. You won’t get wealthy in the military either, but you can become extremely well compensated (wealthy compared to average persons but dirt poor compared to the equivalent responsibilities in the corporate world).

* Become a JavaScript developer. As a JavaScript developer the incompetence is an industry norm so you can easily achieve a highly salary with minimal time investment. Salaries are inflated and expectations are low. JavaScript developers will often complain about stresses that do not seem to exist, as compared to the academic or military life, plainly indicating that stress is relative. This is the easy life unless the industry matures, at which point many developers will quickly find themselves disqualified from practice without a fallback option.
> the likelihood of getting caught does.

This.

Many crimes are barely enforced; I'm thinking of some kinds of moving-traffic offences such as using a phone while driving. Because it's not enforced, people keep doing it; so the government increases the fines.

But increasing the fines has zero effect, if everyone knows the law isn't enforced.
> safe code is impossible

> Humans cannot write safe software. Ever. No matter what.

Formally proven code does what it says on the box? Do we have different definitions of safe perhaps?
Why wouldn't they do fusion locally but also build a Dyson sphere? Doing only the former produces less energy than doing both the former and the latter.

The view that they wouldn't do both is premised on the assumption that they won't need or want that much energy, combined with the assumption that the problem of disposing of the waste heat makes the extra energy not worthwhile.
One little expansion: what you described first is the arithmetic expectation, which is a good approximation when the numbers involved are small compared to total wealth.

When you start taking larger bets, you want the geometric expectation of total wealth, i.e. (current wealth + outcome)^probability.

(This is the Kelly criterion for judging significant opportunities.)
I don't think that can be answered in general. It depends on what exactly you want to do and the maturity of the libraries in that area, and how security critical your application is.
Numba can compile in “no Python” mode only with a subset of Python. Eg classes is limited and is still experimental. Also I think string manipulation is slow but the doc has details.

If you want to specify the type (for example for aot or just because you want to make it clear) then the call signature is less flexible.

In short, pick any random Python library, you’d find there are very few places you can jit accelerate something effectively. It is for numeric.

Even for numerical code, it is more like writing C functions than say C++ (with classes etc).

But it does makes accelerating vectorized code very easy. Even if you have a function that uses Numpy, it is likely you can speed it up using Numba with a decorator only.

But when it doesn’t work, it might often be not very clear why you can’t until you get some experience.
Practical use cases for JavaScript ES6 proxies
Definitely C!
Jira and Salesforce are probably too complex and too expensive for a startup. Shortcut is great for project and ticket management. On the CRM side, Zendesk sell (ex Base CRM), Pipedrive, Hubspot are way more appropriate for a small sales team.

Also if you are interested for mrr and other subscription metrics i recommend Chartmogul.
Of course yes. You are an intern, not the CFO with a 200M€ incentive.

I am trying to imagine what you can loose by joining. The only thing they comes to mind is that you may be interesting in a completely different environ environment (academia, health services, ong, ...) or size (startup).

If not there are seriously zero cons.

If Meta was to crash during your internship would that be a problem? No.

If Meta was to crash a day, week, month, year after your internship would that be a problem? No.

If after your internship you are offered a job, then of course you must think about this a bit. And then say yes, because there are still no downsides for a first job.

If in a few years you come back here about that CFO job then other high profile managers will help you.
In my experience, many financial products marketed as having "intelligence" are indeed just layers of SQL queries (rules).

The benefit of using SQL rules engine in a financial setting is that you can prove causality and intent throughout. Why a customer was declined for a loan can always be traced deterministically to some rule SQL that legal previously approved per regulations in that jurisdiction.
That’s sounds like something that someone from a Type I civilization would say.
In theory, a compiler toolchain is not required since Numba already comes with LLVM, i.e. for JIT compilation, no additional compiler is necessary.

In the past, that was also possible for AOT compilation [1], but that technique broke during some update and it seems like there is no one left who knows how to fix this.

[1] https://stackoverflow.com/a/42198101
Speaking of free services, while looking the tweet a logon prompt popped up after a scroll or two.

Naturally I closed the tab, and now have even less of a reason to go to Twitter, but wth.
I've been using busybox vi as my root editor but it doesn't have secure mode which disables shell access within vi. It looks like OpenVi and nvi2 have them. Are they preferable to busybox vi if I want better security as a root editor?
Successful documentation is not based on tools but company culture.

If your company is a culture of reviewing and updating documentation it will have good documentation, if it doesn’t, it won’t.
>I would say that if USA removed itself and their forces from EU, all of this war/invasion stuff probably wouldn't be happening.

I'm not sure about that, it could be with out the US in Europe they would be bolder.
Why should I use this over, say, D?
That's a defeatist position.

99% of the problem is just wanting to not have to rewrite a hundred parsers in memory-safe languages.

It's just economics and engineering.

They don't have to change everyone's minds or fix the world. They'd need to invest a lot but so far nobody really thinks it's worth it.
Perhaps it is just me, but the provided example makes me shudder:

> For a made-up example, let’s imagine your company maintains a tool built 25 years ago with the C compiler from that time. It can’t be upgraded safely because the entire world’s banking system would fall apart if it did. Maybe you keep a dedicated laptop as a digital time capsule to maintain this tool. Instead, you can create a Nix shell with whatever version of the tools you need, pinned and never upgraded.

Yikes! If your company depends on a tool it can never upgrade because the business would collapse if you did, you should be embarking on mitigation projects and/or partial rewrites right now! Don't enable this abusive situation for longer with "Oh but Nix makes it much safer!", because that is going to make the problem that much worse when it finally does collapse.
> In RHEL we turn all warnings on, compile everything with hardening flags, use valgrind during development, and feed everything through Coverity.

Surely the compile time is not 100ms anymore then?
I tried. I didn't feel like spending days learning their custom config language just to install a program I want to use. Ease of use is not a label I would apply to NixOS.
You're missing the point.

Humans cannot write bug-free software[1]. Then if you're soft has security-related things to do (like credential management etc.) you cannot be sure there won't be a way to bypass it.

But here we're talking almost exclusively about remote execution bugs coming from memory-safety issues, which are indeed preventable. Any managed language does the trick, and if they are not fast enough for your use-case there is Rust. (And, before anyone mentions it, since this isn't some low-level/hardware related thing, you don't need to use unsafe Rust).

Rewrites are costly and take time, but we're talking about the wealthiest company on Earth, and this issues has been around for years so they don't really have an excuse…

[1]: at least without using formal verification tools, which are admittedly not practical enough…
Interesting. Would a whitelist approach have prevented this ( no random person sending you a gif )?
>Why bother with all the "Microsoft ♥ Open Source" stuff?

Well look at how many people are fooled. Appearances matter, not just matter, make and break an entity. So PR is ramped up to 11. Propaganda works even if, and in a certain case, especially if there are contradictions like that.

>this is plain creepy

Always has been. For one example, which was a major turnoff for me from Microsoft, was them pushing the idea of Trusted Computing, back in the mid 2000s. Always-on internet was getting widespread adoption, so they tinkered with the idea: what if we would always check the software's and files' authenticity, every time they are opened?

https://en.wikipedia.org/wiki/Trusted_Computing

Make no mistake, they're past the point where they need people to like them. With enough clout, all they (or any other large corporation) need to do is offer competitive prices while they retain their influence. The rest will take care of itself.
>WTF with all

It's the zeitgeist of computing. Can you point out a single large established entity that doesn't do this?
> And, of course, there are dodgy web sites out there demanding payments for access to their content.

Nice self reflection (:
You missed the word I wrote "should". Funding agencies want to fund only "practical" research. But studying the migratory patterns of a single species of butterfly should be funded as much as the latest biotech fad that supposedly is of "practical value".
I have written quite a bit of cython code as well and at least the last time I looked cython was much better documented than numba (it has been a couple of years though so things might have improved on the numba side), and I would agree with the previous poster is generally quite well documented.