skysight-inc/HackerNews huggingface dataset:
No doubt it's the worst solution, except for all the others. We have few software tools for dampening the descent of this place into flamewar. If HN burns itself to a crisp, what good does that do anyone?

I do think it can be improved by making it more of a probation system that explains what's happening and how long the probation period is, presumably with some sort of exponential backoff so that over time probation converges to a permanent penalty. This is on the list to implement.
I don't see what is unhinged about it: it was a pretty closely contested election and it could have easily happened. Which would give Putin a chance to do this without any fear of interference. Brexit certainly helped him as well.
This is true of all contracts.

Just because someone agrees to something in a contract doesn’t make it enforceable, and it’s even worse if the contract doesn’t specify what the consequences are for breaking it.
Unprompted derision and self-exclusion from some flaw is a common emotional self-defense mechanism. Emotional flaws about intellectual pursuits aren’t excepted.
I like to think I would be brave enough to say something in that situation. But you never know until the chips are down.

Kudos to the Jetbrains folks.
It may be the case that "The West" could have done things to prevent this invasion, but the choice to start blowing up children and families was Putin's. It is his fault.
They are already dying for this. Really, you make no sense to me at all.
> Imposing Swift and Severe Economic Costs

It's funny seeing "swift" in so many of these headlines, I think it's a subconscious reference to what people are really thinking about.

Some context, one of the stiffest penalties on the table for Russia is remove them from the SWIFT [0]. As I understand things this is up to western Europe is still being decided.

[0]: https://en.wikipedia.org/wiki/SWIFT
So let's take a closer look at the fairly recent CVE-2022-21658.

Rust's standard library provides std::fs::remove_dir_all("/some/dir"), in C++ you will find the very similar std::filesystem::remove_all("/some/dir")

As you might anticipate, these functions get rid of the directory /some/dir if necessary deleting sub-directories and files recursively in order to achieve that.

They both explain that they won't delete other things, even if there's a symlink in /some/dir or some child that points to those outside things, the symlink gets deleted but not the thing it pointed to.

What kind of terrible unsafety was discovered in CVE-2022-21658?

Until Rust 1.58.1 you could exploit a TOCTOU race condition to blow away other people's stuff using symlinks when they made this call.

And where is the CVE for the same bug in C++? There isn't one. C++ standards people argued that the C++ standard already actually says that none of their filesystem API is safe to use if you have a "concurrent environment" in which such races are possible. Standard C++ programs are only intended to run on a machine where they have exclusive control over the entire system for the entire length of their runtime and so when your C++ program deletes files you thought it couldn't delete that was actually your fault for not being familiar with every caveat and ruling in the entire C++ standard.

What should you do about that? I believe the answer is obvious: Use Rust
Quite concerning to me is that this was seemingly coordinated between Putin and Xi, and TikTok is controlled by China. So Putin could very easily control what gets prioritized and goes viral or what quietly disappears from the narrative due to lack of reach, with just a call to his buddy.
Patreon locks up $250k in donations for Ukrainian veterans
Patreon removed the page of the foundation savelife.in.ua. They support the veterans of the Ukrainian army and act as source of news from the frontlines.

Today their account on Patreon was removed and they lost access to the funds donated.

Full message in Ukrainian is in their facebook feed:
https://www.facebook.com/backandalive/
Bandersnatch by Jerome F. Davies
It's easy enough to get un-rate-limited. Just build up a track record of making substantive, curious contributions—that is, of using HN as intended—and then ask us at hn@ycombinator.com. It's not as if we're unresponsive (although the inbox does have poor worst-case latency).

Actually we often take rate limits off accounts without being asked. It's a matter of looking through the history and seeing if the account has stopped taking threads further into flamewar and/or is no longer making a habit of unsubstantive comments.
Most of the really annoying UB is technically in C89 though, it’s just that compilers haven’t really treated it with such contempt for the first two decades or so. I can’t even recall any new kinds of (non-library) UB in C99 or C11 (though there have to be some).

So “old C” in such a case would need to mean “an old C implementation” (or possibly a new one, but simple or configured to behave like an old one), something like GCC 2.8 maybe, and nobody’s using that on desktop. So the language standard version should be mostly immaterial, and it’s not like the C89-to-C17 difference is anything like the yawning C++98-to-C++20 chasm. (This is a carefully phrased statement: C99 had complex numbers, which are annoying, and variable-length arrays, which are a significant change, but C11 demoted both to optional features.)
His press briefings were widely played on international media, so someone believed. Because there's always someone gullible out there.
The Russian Hospital seeking missiles are famous since Syria.
Ask HN: How do I (USA) know if it is legal to work with my Russian clients?
I live in the USA and have licensed software (that I wrote) to a few Russian companies, and I periodically interact with them for support issues. My software isn't anything that would be considered "controlled" class software (e.g., crypto). However, I don't know how to tell if I am violating any sanctions. Where would I go to find out if I'm running afoul of some new restrictions?
Sounds like GNU/Linux is probably warranted.
I'll be pinning that for a couple releases unless there's a major security bug O_O
Well I guess we need to send every US President since Eisenhower to the Hague in chains, then.

Don't act like Russia is some sort of unique evil, here. The gallons of blood spilled in collateral damage to innocent civilians by US, US-led, or US-financed operations in countries we have absolutely no business being in can fill swimming pools.

Literally anybody writing, posting, tweeting, or writing column-inches about the horrible action by Russia from US soil needs to stop, notice where they are, and recognize that OUR government is orders of magnitude worse, and has been at it for far, far longer.

I will fault the Russians for one thing, here. The FSB should have fabricated evidence of WMDs held in Kiev, claimed that Zelensky was murdering babies, then went in under the banner of Freedom(tm).

This silly business of conducting military options unapologetically for national interests is so old-fashioned. Lying to the world through your media mouthpieces is the way to do it. You'd think there'd still be some of that Pravda spirit left over from the USSR, but I guess not.
interesting that it's 'veracity and distribution', not just distribution. makes sense that you need to hash the file, but I wonder about various higher-level ways to decentralize CI while maintaining a cheaply checkable 'affirmation'

for example, can you cheaply verify repeatable builds? (on a phone even?). can you do intense linting for privacy violations like phone-home, then publish a 'lint payload' that's cheaply verifiable against the built binary?

feels like if f-droid leads here, commercial software will have to adopt their tools to maintain their position of trust

(also huge fan of f-droid project, I donate, I think it gets more important every year)
This kind of analysis ignores what Ukraine and Ukrainians actually want. Western Ukraine, at the very least, is extremely nationalist and anti-Russian. Do they not have the right of self-determination as a sovereign country?
Do you understand the difference between feeling/impulse and wanting to do something?
I'm not going to criticize your all-chocolate diet, but its always sensible to take supplements in the form of embedded nuts, nougat, praline and perhaps fruit and mint flavoured confections.
I own a paid license for MutableAI tool.

A few notes:

1. The progress that was made by Omar and the team (from alpha to working version that is useful) is astounding. I am eagerly waiting for more improvements that will make my regular daily workflow even more fun.

2. The tool is useful for both junior and senior developers and data scientists. They get different things from it though: junior developers get cleaner code, fixes for simple mistakes, structure and demonstration of how things “should be done”. Senior developers get to skip mundane tasks, go from prototype to production code quicker and can concentrate on more complex things/details.

3. I especially like that there is an option for “on prem” installation. My current employer is very strict about using “online” tools that can leak our code outside. “cloud only” tool would be a deal breaker for us.

4. Considering the amount of time this tool can potentially safe, it will pay for itself in no time. I am mean really – if it saves me just a few minutes of mindless reformatting/editing/adding comments – it already paid for itself.
If your memory is anything like mine, chances are you momentarily don't remember the word "plumber".

Hierarchical structures, while inflexible and sometimes prone to mis-categorization, provide navigational cues that tags don't provide. It's almost like with GUIs vs CLI - if you know what's already possible and want to express yourself precisely, you want a CLI (tags with lots of Boolean operators to precisely include/exclude). And conversely, if you don't know what's already possible, but could figure it out if you have the options laid out in front of you, then GUI (a hierarchy with all choices already laid out) will be more relevant.
>Where are the voices that seek a structured shift away from personality cult politics? The innovation we all need for the future are those voices.

You should look at what anarchists have been saying in their criticism of the state and capitalist system.

https://theanarchistlibrary.org/library/the-anarchist-faq-ed...
My understanding is that Linux has often faced issues where ”compiling the specification correctly” means “Ha-ha gotcha, we can actually throw half your code out of the window because you misread the deep aliasing rules on page 8432 of the spec”

Their hesitancy with newer standards is understandable, when viewed against that backdrop
The current submission counts as a dupe because the story had major attention less than a year ago. This is in the FAQ: https://news.ycombinator.com/newsfaq.html.

Macroexpanded list:

A List of Hacker News's Undocumented Features and Behaviors (2018-20) - https://news.ycombinator.com/item?id=26866482 - April 2021 (255 comments)

A List of Hacker News's Undocumented Features and Behaviors (2018) - https://news.ycombinator.com/item?id=23439437 - June 2020 (266 comments)

A List of Hacker News's Undocumented Features and Behaviors - https://news.ycombinator.com/item?id=20292361 - June 2019 (25 comments)

A List of Hacker News's Undocumented Features and Behaviors - https://news.ycombinator.com/item?id=19212822 - Feb 2019 (183 comments)
The codes are the last six decimal digits of an hmac over the key and the current time (rounded to some boundary, generally 30 seconds). The QR code is the account's metadata and the preshared key.
The end game is to receive another puppet-state close to Russia. It's the only target.
Wow, I mean pushing for immigration never meant abandoning the nation state way to kill a strawman.
because currently gcc maintenance is almost "free" (in comparison to maintain gcc which is as big a project as linux) and they just have to work with the powers that be over at gcc. That's much better than forking it and having yet one more HUGE project to maintain independently. The advantages of sticking to the current policy FAR outweigh the disadvantages.
For the record, we’re ultimately on the same side here. I’m just trying to push back on what I see as an overly simple narrative around the Russian motivations for this. But I’m ultimately rooting for an independent Ukraine and anyone fighting for that.
It’s not like every person institution and algorithm sells at the same time lol. Also, cascading effects.

Markets hate instability, and any price takes time to consolidate. It might never “consolidate”during high volatility.

dont see this as up as down but rather as volatility because yep it’s a volatile time
<q> Nobody's building a magical housing and treatment facility for 5,500 people. </q>

Yeah, that's the problem; nobody's building it, not because the facility is impossible to build or run, but because it would require the political will to compel anyone arrested on multiple counts of vagrancy to be held there on the condition of accepting some form of treatment or further counseling.

It is not magic; the tent city phenomena is not a permanent fixture of big west coast cities.
Spam prevention and rate-limiting
The fact that Germany was going to increase their dependence on Russian gas with NS2 instead of lowering it is despicable and incredibly short sighted. Same country which is going nuclear free. Complete morons.
That’s not how geopolitics works. I’m from Bangladesh—we’re sure as heck India’s back yard.
It's always going to be something lightweight and probably tiling for me. Right now I'm using Sway because I'm doing the Wayland thing and I'm a sucker for /r/unixporn type desktops.

That being said eventually you end up with both the Gnome and KDE libraries anyway - plus a handful of Electron apps are unavoidable today.
HA this is mostly blustering Russia has gas and oil which we (and ESPECIALLY Europe) want
Worse, you have to add Kazakhstan, which is now under a Russian thumb too, and Uzbekistan.
Has anyone worked on a standard for authentication / attestation of video?

I was mulling it in the context of deepfakes, and there's enough money in it that someone has to be working on the problem.

E.g. Something that signs metadata (time, geolocation) at time of capture in a verifiable manner
Probably not a bad idea to put all your troops and equipment stockpiles near an area that just about everyone is going to be reluctant to bomb indiscriminately - nobody wants to accidentally destroy that shell protecting that nuclear power plant I would imagine.
hello!

atm writing from kyiv. after a day in fear and anxiety, patreon blocks one of the of the civilian aid resources (prolly because of the amount of money being rolled by ukranians as of today) https://savelife.in.ua/en/donate/ (yeah - shitty en localisation, doubt there was any need before)

would be amazing if some of you had any contacts in patreon and could pass on the message

thanks from kyiv
and if you’re still in doubt: one tweet is all it takes to build a case

they prosecute people for liking content on VK or blowing up houses in Minecraft

https://theguardian.com/world/2022/feb/10/russian-teenager-n...
I don't think that's accurate at all. Parler was condemned because of a much publicized narrative of its role in hosting speech related to J6 protests, right? And it was shown contemporaneously that there was far more activity on other platforms (facebook) coordinating those protests than on Parler, though they suffered not. Nonetheless, Parler was blacklisted - app pulled (which looked like selective enforcement of ToS). When they attempted to set up on other platforms it was difficult to find a home, in part due to similar de jure application of ToS, but also arguably due to a lack of substantive competition in that space. I say de jure application of ToS because the ToS are not applied consistently, and seem discretionary from the outside. It is not like porn on Disney, but more like (exactly like) talking politics on facebook. Sometimes it's okay, sometimes it's not. Leaving aside flagrantly bad examples of talking politics, your best predictor of how ToS will be enforced is by understanding the alignment of speech to the official institutional messaging. We can see this at work in a very recent example - talking about the COVID lab leak hypothesis would get you banned when the government was messaging (and invested in) a natural origin hypothesis. Now that they are not, such speech will not get you banned. The nature of the speech has not changed. Have the terms of service delineated these circumstances sufficiently? I would say not at all. We can infer what speech will be banned based on an acceptance criteria that is only loosely coupled to the actual language of the terms, and more easily explained by (documented) coordination between the government and social media platforms.

I think the "funny" you express may be schadenfreude based on your political alignment, but there are some transcendent and substantive issues of political principles that are worth examining (and I feel, criticizing) regardless of one's blue team/red team alignment. By transcendent, I mean these problems come back to bite both the red team and the blue team in time. This is classic "Cast it into the fire" type stuff.

https://www.youtube.com/watch?v=ajUlhaX9hQI

https://www.youtube.com/watch?v=GI_fvDOUCu8
If you're checking that 17 isn't a typo, do a screen grab and doodle on the graph. For each vertex, write down how many ways you can get there in two steps from v1. There are the same number of ways to get back, so you sum the square of these numbers. That's the dot product (3,1,1,1,1,2) with itself, 9+1+1+1+1+4 = 17.

The (1,1) entry of the matrix multiplication of A^2 with itself is exactly this calculation. Matrix multiplication is a dance one sees everywhere. It's crippling to teach young minds that matrix multiplication is composing linear functions, when the dance shows up so many other ways.

Path counting is for example at the heart of automata theory in computer science. For a finite state machine, the question becomes "is there a path?" rather than "how many paths?" Think of 0 as false, and any positive integer 1, 2, 3, ... as true, and one sees this same dance in automata theory.
The article links to "The PGP Problem" in an attempt to suggest that GPG signatures are bad somehow. Here are my comments on "The PGP Problem":

* https://articles.59.ca/doku.php?id=pgpfan:tpp

The article also claims that Debian has moved away from GPG signatures. This is not true.

This all seems like a pointless distraction from the point that article is attempting to make...
>
Yeah, that's the problem; nobody's building it, not because the facility is impossible to build or run, but because it would require the political will to compel anyone arrested on multiple counts of vagrancy to be held there on the condition of accepting some form of treatment or further counseling.

Nonsense. It's not being built because city voters (and, more importantly, city businesses like Amazon) like their money more than they like not seeing tent camps.

Complaining on AM radio about tent camps is free, fixing the problem is expensive.

You're attacking some weird progressive boogieman, when progressives aren't the ones winning city elections, or in control of the council. The winners of the most recent one are all status quo corporate candidates, who have zero qualms about fucking with homeless people (hence the re-introduction of the sweeps), but have every qualm about actually spending money on solving homelessness.

Musical chair sweeps are cheap, solutions are expensive. The political will to do something is there, it's just not the political will to do anything useful. You can't with a straight face blame progressives and bleeding hearts for not solving the problem, when they aren't the ones running the town.

> I don't think compelling longterm vagrants to accept mandatory psychiatric and drug treatment in a secure facility under state custodial care is criminalizing poverty.

> but because it would require the political will to compel anyone arrested on multiple counts of vagrancy

... So, hold on, let me get the record straight, is poverty and/or mental illness a crime or not? You seem to flip-flop on this from one post to the other.
*for drivers primarily
Though C89 does not support declaration of a scoped loop variable like C99 does:

for(int i = 0; i < 10; i++) {
// ...
}

C89 does support declaration of variables at the top of braced blocks whose scope is limited to that block:

{
int i;
for(i = 0; i < 10; i++) {
// ...
}
}
Sometimes if each repeated bit of code is slightly different the common method ends up being really complicated. I would rather make 6 simple changes than do one really complicated change.

The other problem with a DRY method is that you often increase cyclomatic complexity. Where each single method has one execution path (6 paths in total) the DRY method has 6 slightly different intentional execution paths, but 2^6 possible paths, this can make reasoning about the method impossible.
is this the same plant as the one from 1986? this plant is still active today? im very surprised.
Countries tending to their own border security isn’t a matter of “good” and “evil.” Russia has far more basis for invading a rapidly arming country on its own border than the US did for invading Iraq or Afghanistan or Vietnam or Korea.
There is a lot of stuff that should NEVER appear in a mixed view. (Google is full of examples of that.)

Tag coulds and other meta data can still be very useful. The challenge is creating useful tags/meta data automatically. For example a time stamp for every modification or a label for every application that created, modified or loaded the file. Perhaps even the applications you were using when the file was created/modified and the file names of the files loaded into the application. Train some AI to show you files you probably want given your current activity.
IIRC Google works the same way. The automated refactoring tools (Rosie?) may make it go faster, but you generally don't fix up 15,000 call sites in a single change... you break it up into smaller batches spread across the tree.
Not to detract from the importance of their statement today, but I’ve always thought that they were really a “Czech company” on paper only.

Take a look at their supposed Czech HQ office:

https://www.jetbrains.com/company/contacts/prague/

And then compare to their St Petersburg, Russia office:

https://www.jetbrains.com/company/contacts/st-petersburg/

Which one looks more like a HQ? The latter office is their largest [0] and also just happens to be where their CEO is based [1].

It’s always felt to me like their de facto HQ is in Russia.

I’m not trying to insinuate anything, I like their products and I’m pleased to see their statement today, but the “we’re a Czech company” thing has always felt a bit odd to me.

If anything though, it makes the stand they’re taking today even more significant.

[0] https://officesnapshots.com/2020/01/16/jetbrains-offices-sai...

[1] https://mobile.twitter.com/mshafirov
The US, etc could have banned Ukraine from NATO forever and it wouldn't have mattered at all. Putin's speech rarely mentioned NATO as his deciding factor. He said doesn't believe Ukraine should exist independently of Russia.
Having balance there might be single nost effective thibg preventing WWIII...
> This conflict will affect 1/4 of the world's wheat which will affect food prices.

That's not 1/4 of worldwide wheat production, but 1/4 of exports of wheat. Those are numbers that differ by orders of magnitude.
No, not if it significantly affects others, as it would in this case, by risking a nuclear war.

Should countries be able to get nuclear weapons just because they want them?