skysight-inc/HackerNews huggingface dataset:
> This particular type of bug doesn't happen with HANDLEs.

This does not match my experience at all. Just like what you said about EBADF, Win32 error code 6 (ERROR_INVALID_HANDLE) is a huge red flag for a race condition where a HANDLE gets re-used and inappropriately called upon in some invalid context, possibly even with security or stability concerns. I used to chase these bugs a lot when I worked on Win32 code bases.

If anything this class of bug is worse in Windows because (1) multi-threaded programs are way more common on Windows and (2) HANDLEs are used for more things than file descriptors.

I guess fd reuse is more likely because they tend to get handed out by the kernel as integers in increasing order. But handle reuse absolutely does happen, and if you have this class of bug in a process with a lot of concurrent handle creation in many threads and in a commonly used program it absolutely will bite as a bug at some point.
“the other slower but more accurate”

I am not so sure about that. From my experience quick guesses are often as good as detailed estimates that are based on assumptions that will change.
Or you know, just insert a $5 SD card like a normal person?
Then in their clone, they made all the commits. But who cares about their clone?
It's worth noting that Aurora is basically just anonymized wrapper around the Google Play store, it's not actually a separate app store. F-Droid is a wholly separate thing.
Thanks for sharing. I won't be using Namecheap for anything of consequence.
Maybe as an individual I could see supporting them, but as someone who works in the corporate world and actually needs to rely on services like this, I wouldn’t risk doing business with a company that might change their TOS at the drop of a hat because of the political views of their CEO or some geopolitical event.
True; I think in reality all the supermajors get some degree of negative coverage fairly equally, I was probably full of shit when I said Obama's finger-pointing had really worked.

And yes, I'm of a similar age where "Exxon Valdez" is synonymous with large oil spills.
> you have no business in any international matter (finance, sport, gaming, internet, etc) until you fix your shit in your country.

Seriously, what kind of argument is this?

Have you risked your own life to complain against a dictator? I don't know, maybe you have. But >99% of the people in the West haven't.

Who are you to tell another random person, who (to the best of our knowledge) hasn't done anything wrong, that they need to do that (and succeed at it, no less!) in order to enjoy "sport, gaming, internet" and other things we take for granted, just because they happened to be born in Russia?

I'm from the West myself, with no relation to Russia except for some acquaintances, and despise Putin and his brutal invasion. But honestly I don't know what is the larger threat towards everything the West represents, Putin's nukes or attitudes like this (I picked your comment but there are many like it in this thread...). Denying individuals a normal life based on their place of birth and things that aren't their fault at all is just evil.
Third option: work with a transparent Open Source organization that processes CAs on the basis of keeping the Internet secure, where nation-state-level interception is considered part of the threat model.
So it’s an American who went overseas and joined the Russian invasion of Crimea?

I thought such actions were illegal?
I looked it up. Actually wood had about twice the specific heat as aluminum. So I must revise my original comment to remove specific heat as a driving factor. This leaves only thermal conductivity. A wood ladder would have more heat to give than an aluminum one, but it still is able to give it much slower, making it ok to touch for longer.
How do you get off punishing normal people for the supposed crimes of their government? Are you going to go back and retroactively ban U.S. users for the many war crimes various regimes have committed over the years? Are you from the U.S.? Maybe you should just resign -- no point in you having a "platform" as an executive when your government has committed such atrocities around the world.
The RPi would be viable in my work at any price lower than the cheapest Intel NUC. We’ve bought 800 since November. We’ve decimated our Windows licensing costs, power use, MTBI, and shrunk our attack surface considerably.

There is really no competitor that has even been a consideration for us. Software stack is the hardest to get right with them at scale for fleet management IMO.
Nullable/option types are explicit. Every time you ignore null, you have to make a conscious choice to do so, and it's prominent in the source code forever after.

The problem with null pointers is that you have to remember to check for null. For OO languages specifically, the other problem is that null pointers violate the Liskov substitution principle.
This is a use of "anonymous" that is unfamiliar to me. Do you mean something like "untraceable"? For example, when non-profits credit an anonymous donor, they know who the person is. In that more common sense of the word, Wikipedia's anonymous edits are indeed anonymous: they are published without a name attached.

Anyhow, that seems besides the point. All HTTP requests come with IP addresses. That the police might be able to trace them back to a house eventually does not say much about either Wikipedia (who would give up an IP address with a warrant whether the edit was for a named account or an anonymous one) or no-user-account systems in general.
What's the last product you've seen that still uses this color system?
Do you realize how many people would suffer and even die because of that?
"it flushes out the people who would
have supported Turing's ultimately
fatal prosecution [...]"

That's possibly the most hyperbolic thing I've ever read on HN (from someone who looks as though they're just a bit idiosyncratic, and not intentionally trolling) :)
Live, Laugh, Localhost
I've seen some uprisings and they've been put down and definitely respect and sympathize with those people and as I said we will try not apply this policy towards those by making exceptions but those people are a minority. In fact Navalny, is one of my personal heroes. Probably one of the bravest men I've seen in my lifetime but most Russians don't feel this way. There needs to be more done.
Yes, understood. I get where you are coming from, but at the same time I totally understand that for a company with such a large footprint in Ukraine it is absolutely unacceptable to continue to do business with what is now properly termed 'the enemy'. The price for access to the global market is that you behave like a team player and that you don't willy nilly invade other countries.

Even if isolation does not necessarily correlate with regime change that is still something that in the end gets decided within the country, not outside of it. After all, regime change is exactly what Putin was after in Ukraine so that would seem to be fair turnabout.
(This is a bit of a tangent, apologies.)

> fork(2) makes a lot more sense when you realize its heritage.

I think it only makes sense when you consider its heritage. It has ALL the wrong defaults for what it's almost always used for these days: running a subprocess.

It copies "random" kernel data structures like open FDs, etc. and you have to be very careful about closing the ones you don't want to be inherited, etc. etc. It may copy things that weren't even a relevant concept when you wrote your program.

The correct thing to do is to very explicit about what you want to pass onto the subprocess and to choose safe defaults for programs compiled against the old API when you extend it. (Off the top of my head, the only thing I'd want to be automatically inherited by default would be the environment and CWD.)

It's 100% the wrong API for spawning processes.

Now, I don't think afork() solves any of these problems, AFAICT. But my personal perspective is that fork() and its derivatives are the wrong starting point in the first place for what they are used for in 99% of all cases.
That article doesn't give one single example of an orchestra that isn't using blind auditions any more.

It does give one single example of something, namely an orchestra looking to appoint something like an assistant conductor (that isn't the job title; the article claims it's an equivalent post; I haven't attempted to find out whether they're right) specifically from the non-white non-Asian population. Maybe that's a good thing, maybe it's a bad thing, but it has nothing to do with an alleged end of blind auditions: you literally cannot give an orchestra conductor a blind audition.

(When I say "one single example", I mean it; the article suggests that this sort of thing is becoming common, and for all I know it may be, but it doesn't deign to give any actual evidence other than this one example, along with a link to the same NYTimes article asking for an end to blind auditions.)
There was a recent great podcast interview of How I Built This with the goodreads founders. I would strongly recommend listening.

IIRC they talked about the early days, reasons for selling to amazon, being viral before that was a term, growing while being profitable, realizing they got more traffic than the New York Times did, why they thought their site was better than alternatives.

https://www.npr.org/2022/02/04/1078415544/goodreads-otis-and...
THEOS might be a contender. I don’t know when it was created, but I ran into a user 15 years ago. They were old then and still providing active support to customers.

http://www.theos-software.com/

Edit: Looks like it died in 2014 or 2016 or, at least, that’s the latest update I see.

Update: Yup, it’s now listed as suspended. Looks like it was started in 1983.
It's a great resource. With my minimal needs, I don't use any other Android store these days. (I only wish they had enough donations to fund faster builds of new app releases.) A few gems that I have found useful:

Aard 2: Offline dictionary

andOTP, Aegis: 2FA code generation (including Steam, if you have your secrets)

DAVx5, ICSx5: Sync calendar & contacts with standards-supporting servers

Element: End-to-end encrypted chat on the Matrix network

FBReader, Librera PRO: Books

K-9 Mail, FairEmail: Mail

KDE Connect: Phone notifications, SMS, files, remote control, etc. on the linux desktop (not just for KDE Plasma users)

Metrodroid: Read NFC transit card balances

NewPipe: YouTube

Organic Maps, OsmAnd~: Offline navigation (maybe online as well?)

Privacy Browser: Lightweight web browser with a simple dark mode, using the OS WebView for rendering

Shattered Pixel Dungeon: Fun roguelike game

Twire: Twitch
Dang, that's too bad. Never follow your heroes on Twitter, I guess.
This is the coolest news ever brother! You gonna nail the big show now!
It's not just that; process creation in Win32 is generally slower / more expensive, and has been since forever.
Think this tone policing is substantially worse discourse.
> One person could have enough to give every American $1M without first taking $1M from every American. Did you and everyone you know buy $1,000,000 of Washington Post or Wallstreet Journal subscriptions, for example?

Once net worth is that high, the majority of it seems to be attributable to stock market and other similarly intangible $, rather than $ someone has literally directly taken/earned from others. It seems unfair to expect humans to contemplate big numbers (something we're known to be bad at) by also thinking about imaginary $ as though they had a 1-for-1 tangible source.

That being said, you certainly aren't wrong to think of it this way. For example, Bezos' net worth of ~$110B / ~333M Americans = ~$333/American , which sounds like a reasonable ballpark approximation of how much _profit_ the average person has spent on Amazon + Audible + AWS + WaPo.

Thanks for giving examples of logical ways to process large numbers. These are good ways to double-check quick maths.
I would but... itchy
CalyxOS with MicroG is great - it all basically works, except for NFC payments and most Chromecasting. But MicroG does still provide some exposure to the Google ecosystem, so if your goal is to wholly sever then it won't be what people want. For people like me who just want a "best effort" reduction in tracking and telemetry, it's been great.
Hah, that's pretty funny. Regardless of the motivation as written, the motivation I surmise is:

- some systems (e.g., Windows) lack fork() for various reasons

- vfork() is baaaad

- I know, let's do something like WIN32's spawn() or CreateProcess(), but, like, better

The middle item I have good reason to think is very likely. vfork() still has a bad rap from that old "vfork() Considered Dangerous" paper. That paper circulated a lot way back when, and was the reason vfork() was removed from some Unixes for a while (well, it was left as an alias of fork()) before it was eventually re-added. The Open Group participants would been very aware of that paper, and that is almost certainly the reason that POSIX says about vfork():

Conforming applications are recommended not
to depend on vfork(), but to use fork() instead.
The vfork() function may be withdrawn in a
future version.

So if fork() can't perform well, and the committee won't recommend the use of vfork(), what shall the committee do? Answer: design and specify posix_spawn(). It's not an unreasonable answer. Though, IMO of course, they should have un-obsoleted vfork().
To clarify on the magic link, you only have to do that the first time. The authentication in the backend remembers you when you go back to the site, automatically logging you in. Ideally you'll only have to check your email once.
China is doing genocide against its Muslim population in Xinjiang.
I don't care about your beef with Amazon. They serve the world, while your choice of vendor only serves US customers with US credit cards.
Its day 5, there's no reason to assume current response are sustainable longterm gambles.
You told me to transfer my domains before the 6th of March. But the transfer takes 5-7 days. Even if I initiate the transfer today or tomorrow it won't finish before the 6th. What will you do if the transfer doesn't get finalized before the 6th? Answer please!
The later ARM64 Raspberry Pi hardware is more standard, and you definitely can get most of the hardware working with a mainline Linux kernel. It looks like sound may be an outlier - but bcm2835_audio is in staging, and I2S is in the tree proper but that does require additional hardware.
>No value was created out of them moving these domains. It's not like Namecheap is doing any good here. They're just posturing without actually helping anyone with this move or affecting real change.

Whether you agree with Namecheaps' decisions or not, they are Namecheap's decisions to make.

You're likely absolutely correct that Namecheap won't effect any real change with this move. That said, why shouldn't they show (non)support for whomever they choose?

Yes, this is likely a pain in the ass for many Namecheap customers and will likely piss a bunch of people (Russians and non-Russians alike) off.

It's also likely to negatively affect Namecheap's financials as well.

I have no relationship (financial or otherwise) with Namecheap, nor am I a Russian national. As such, you might think that it's easy for me to take this position. And perhaps you're right.

Then again, I believe freedom of association is an important civil liberty. As such, I don't fault Namecheap for their decisions.

Especially since the company (and right here in this HN discussion) has claimed they will continue to do business (and/or provide more time for transition) with those who aren't supporting the Putin regime.

As you mentioned, most tech folks in RU are anti-Putin. Why shouldn't tech folks outside of RU take the same position?

I know I'm horrifed and outraged by Russia's recent actions. Just as horrifed and outraged, by the way, as by my own government's (US) actions in Iraq and elsewhere.

I'm sorry that you're being negatively impacted by this. It's not fair to you and others.

I'd point out that this wouldn't even be an issue if the Russian government (your government) hadn't chosen violence, murder and destruction.

As such, it's not with Namecheap you should be angry.

Feel free to disagree. Like I said, I have no skin in this "game," except in wishing the Ukrainian people well and hope for their safe passage through this dangerous situation, wholly created by your government.
I respect the basic idea of falsification, but the fact is we routinely draw conclusions despite their being just one of infinite possibilities, all of which are unfalsifiable. The tool we use to distinguish between them is Occam's razor, and with it we can argue for one conclusion or another.

Quantum physicists don't agree on MW, Copenhagen, or weirder hidden-variable type theories. But very few of them are of the opinion that, say, the universe has obeyed the laws of physics until now by chance. It has exactly as much evidence as every other theory, but isn't favored by Occam's razor.

Someone favoring the Copenhagen interpretation would argue that the rest of the waveform is deadweight. Someone favoring MW would say collapse is. I don't know many hidden variable people, but maybe they think probabilities are just more elegant.

Not only are universes operating on each of these theories distinct, there are absolutely things we could discover that would push the balance! Bell's Theorem genuinely hurts the credibility of hidden variable theories. MW would be absolutely deranged without the notion of decoherence. If someone published a paper tomorrow showing why world measure translates into probabilities, I'd call that a big win for MW. If someone found a clever, non-decoherence reason for collapse, it would be a big win for the Copenhagen interpretation.

Regardless, such speculation is far from metaphysics. Overly theoretical? Perhaps. But Newton wasn't doing metaphysics when he proposed gravity, and he was shown to be basically right the instant a handful of elegant equations predicted the motion of the planets.
It's not absurd. People value different things, and while sometimes people do get sucked into hype or heavy marketing, sometimes something you think is a waste of money will be an experience someone else will enjoy.

I think framing it as being "better" (or not) than a regular meal doesn't really capture it. I certainly expect the food at a Michelin-starred (or other high-end) establishment to use fresh, high-quality ingredients, and to be seasoned and cooked properly. But I also very much appreciate just eating something different. I cook a decent amount at home, but I probably cook the same 6 or 7 dishes, with some small differences, over and over. When I go out to "normal" restaurants, I eat the same 30-odd dishes over and over.

Not that I don't enjoy all that! I certainly do. But sometimes I just want something drastically different. Flavors and flavor combinations that I don't encounter anywhere else. Specialty ingredients that I would never buy for myself, and aren't usually found in most restaurant meals. And I'm willing to pay a bit extra to get that experience every now and then.

But I think this is also just a false dichotomy. A restaurant isn't going to get a Michelin star just because they do something novel; the food has to be good, too. And some don't try to do novel things, but aspire to be the absolute best at a particular kind of cuisine or dish, and get awarded stars based on that.
Honestly men of fighting age are probably better off going through Russian controlled points than Ukrainian as terrible as that sounds Russians are most likely to let people leave so they don’t have to fight them later
Why not just migrate the domains at that point and be done with it?

I understand the arguments about individuals and how it could be a burden with all that's going on, but a private company? What's the argument?
>Windows as we know it didn't technically exist before

That's weird way to put it, kernel was swapped but Win32 was designed to be mostly source compatible with Win16. (and it was available both on WinNT and Win9x)
This post isn’t about file paths but command line arguments
That sounds like a great state of affairs, if people actually raise challenges to such laws, and win. I would love to see such overreaching attempts tied up endlessly in litigation, ideally with associated PR to make sure that the visible actions are all portrayed as a mess associated with the officials supporting such overreach in the first place.

I'd rather see overreach stopped before it starts, but in the absence of that, I'd like to see it stopped by any means we have, including civil disobedience and litigation.

In this context: remove CAs that issue MITM certificates, and loudly and repeatedly say "So you're prosecuting us and demanding that we include a known-insecure CA that's used to make the Internet less secure? Is that what you'd like to say to these cameras, the entire Internet, and people who will see this played repeatedly while they decide whether to vote for you in the next election? Or would you like to drop this?"
I think you're right. I've changed my perspective on this issue and added some clarifying comments in the thread.
> Unfortunately, due to the Russian regime's war crimes and human rights violations in Ukraine

Just to clarify, does your policy only apply to russians and their war crimes and human rights violations against ukraine specifically or is it a blanket policy? Will you refuse to register users from say the UK or France for their war crimes and human rights violations? Or say israel or saudi arabia? Or china or the US?

I guess I'm asking is this, are you doing this for free publicity or for genuine moral concern. You've been in business since 2000 and russia attacked georgia ( 2008? ). Did you stop registration also? Also, since 2000, there have been war crimes committed in iraq, afghanistan, syria, libya, etc, can you remind us what actions you took then and which peoples you prevented from using your service.
Was that package really intended to be a security feature? To me that seems like a low effort way of landing a contract with an over-specific requirement. But security practices used to be way different so that explanation is also plausible.
I have been a (US, before you accuse me of being Russian like you have done elsewhere in the thread) Namecheap customer for years, and have urged at least a dozen others to use your service. I won't be doing that in the future, your responses in this thread have killed any trust and goodwill I had for your service.
Conservatively each person needs 1500 calories per day and that's cutting it close. That's about 2 million calories per year for 4 people.

Potatoes are one of the most calorie-dense vegetables by weight and by growing space. They have 350 calories per pound, so you need 5700 pounds of potatoes to feed a family of four.

A good potato yield is about 25,000 pounds per acre, so you need nearly a quarter acre of potatoes (1000 square metres) to feed your family for a year.
Cash is liquid, 80% of Russian reserves are not any more, after yesterday.
I'm no fan of Putin or the Russian government's war, but I originally moved to Namecheap from GoDaddy over GoDaddy's support for SOPA. I want my registrar to be a registrar, not a political entity. Looks like I'll be looking for a new registrar to do business with going forward.

The Russian government are the bad guys here - people who happen to be in Russia are not. I'm not gonna do business with a company that gutpunches uninvolved individuals for political points.