skysight-inc/HackerNews huggingface dataset:
Cargo cult programming at it's maximum expression.

M. Fowler, Uncle Bob, Kent Beck, GoF authors...

Any book or post by these people is always brought up as a must read. A must read to understand why you should *not follow cargo cults* and see with your own eyes how toxic and damaging these guys are to software engineering culture.

In one hand, I'd say these guys are absolutely revered among computer science students (their main target to sell their books) and developers who have been stuck in the OOP and design pattern rabbit hole for decades without evolving.

In the other hand, the criticism is more present that ever. It's ironic, because the criticism has even lead Uncle Bob to jump the wagon and start to sell Functional Programming in Clojure as a new super *secret formula* and *best practice for real engineers*.
There is a significant difference though. If foreign governments do it, you have a clear legal recourse. If your own government does it...
I haven't attempted this yet but I have wondered about the feasibility of using the nixos/nix docker image just to build a linux/amd64 docker image using Nix. Or setting up a nixos/nix docker image as a remote builder for Nix.
Perform bulk updates across multiple GitHub repositories with auto-pr
He said open, not read. They're subtly different terms but the distinction is important.
Written on top of Lisp.
If the "hacker" hacked his web browser, this wouldn't be an issue. They didn't. They attacked an application running on a server somewhere that was not their own machine, from a web browser running on their machine. The former is the important part in the eyes of the law, and the latter is irrelevant.
I owned exactly one ink jet printer. Every time I went to use it, it was clogged, out of ink, etc. Only bought one set of cartridges for it and then chucked it all in the bin.

I only buy B&W laser printers, currently using a Brother MFC - printer, copier, scanner, duplexer. Always works. A toner cartridge lasts about 2 years and buy white-label equivalent. It costs less than half of the Brother branded one.
Implemented in Lisp.
> While hydrogen has sightly higher mass-energy density

It’s not slightly, it’s three times as much, or more.

Per wikipedia [1], Hydrogen has an energy density of 120 MJ/kg vs 43 MJ/kg for kerosene. That’s if you burn it outright. If you put Hydrogen in a fuel cell, and the output of the reaction is liquid water rather than water vapor, then the energy density is 142 MJ/kg.

[1] https://en.wikipedia.org/wiki/Energy_density#In_chemical_rea...
My satire detector soothed my anger at this comment. It is getting a lot of strain lately...
It is a little more niche but the inclusion of braille in Unicode and it’s impact on ascii art is comparable to IE’s XmlHTTPRequest, in terms of unexpectedly transformative moments in software history.
This has resulted in projects turning to malware multiple times.
There's a balance. We don't let 13 year old kids drink alcohol, have sex, take drugs, drive cars, own guns, vote etc. Gradual exposure to responsibility, or harmful / addictive experiences isn't "sheltered", it's "responsible parenting". Jeez, I wouldn't even let my friend smoke "the strong weed" and he's 46.

"Doom scrolling" didn't exist when I was a kid and I'm glad it didn't. I would never have developed a love of computers. The closest thing I had in the 80s was TV. 6 channels, and they all shut down at midnight and displayed a test signal. When they were "on" the content was mostly shit.

Infinite scroll on social media is designed to be addictive. What chance does a 13 year old have when most adults (who have outgrown their teenage desperation for social acceptance) can't control that addiction?

What happens when your kids is sent home from school because they assaulted someone or vandalized the school because it's a new cool thing on TikTok?

Next they're yelling that the you're a bigot based on some obscure heuristic that doesn't even make sense?

Ever tried using logic with someone who is 100% certain you're the bad guy because they've been brainwashed for 8 hours a day on an app?

What was the big "social contagion" when you were growing up? For me it was music, slang and haircuts. These days it's self harm, coordinated vandalism, pornified ideas of bodies and sex. I know a lady who has a 16yo daughter who is bulimic... so are her whole clique.
The problem is that many people still insist on doing things in person or via a ‘quick call’. I have been around long enough that I insist on chat and email; voice is fine for fleshing out features and such but things like this or basically anything that could come back to you, should be in writing with tons of Ccs. I know many people who insist on phone or personal because they are too lazy to read and write, but I definitely also know a % who do it because then there is no verifiable record. And so I err on the side of safety and do everything in writing.
Long time user of Rectangle here. It is definitely one of my top 3 utility apps on the Mac. I have the num pad keys set up to move windows to various edges and corners of the screen, which is fantastic on an ultra wide monitor.

Somehow never realized that there was a version I could pay for – Purchasing now. Thank you for saving me so much window management frustration in the past years!
Incidentally, cases of breaking and entering often turn on your intent as well; that's the whole concept of mens rea.
Pizza topping is not pizza, so will attract a higher GST
It’s hard though. For Stafford Beer, variety is somewhat in the eye of the beholder. After Bateson’s “the difference that makes the difference”, not all differences are significant.

Currently reading The Grammar of Systems by Patrick Hoverstadt (of the Fractal Organisation). He’s a friend of mine but sincerely I recommended it.
.NET was created as a Common Language Runtime.

When it was announced it supported about 27 languages.

From Microsoft themselves, J#, C#, VB.NET, and Managed C++ (later replaced by C++/CLI).

It was WebAssembly before its time (among many others), with tons of features that WebAssembly is yet to support.
XBUS Modular Electric Vehicle
> to see if there was anything we could or should do in there

That right there is where the company lawyers get called, and all of your contributions to the company code base start being reviewed and ways to remove the most recent ones start being contemplated. It is extremely easy to run afoul of copyright if your employees go around reading your competitor's source code. You may well have a dedicated team that does this, but you'll be keeping a very clear paper trail proving they never came anywhere close to your code base directly.
Would be interesting to see a picture of your place relative to all humans ever. I was shocked when I learned that approximately 7% of all humans ever are alive right now.
>Data privacy laws are among the strongest in the world here

The fear is that you would now have to adhere to those "strongest laws" by hosting your data there.
I’m older than 57% of the world, but only older than 36% of Germans, so I can keep feeling young here ;)
Until it is uncovered and the individual is now screwed twice; once for doing it, and once for covering it up, at which point the company can now potentially claim gross negligence if they become liable.
Hopefully Europe as the rest of the world will follow. Anyone know the current expectations of when it may happen?
yes I think they should have asked only the year of birth,
the day and month won't contribute much to the accuracy of the stats they provide.
look at the bright side: you could be feeling sick and elderly.
Fair point. I was wondering about it from an intention and misrepresentation point of view. To me, it's misleading to claim "we make Fedora" by a lone individual while the real "we" is thousands of contributors.

Disclosure: I work for Red Hat, am an occasional Fedora contributor, but I have no dog in this hunt.
Some devs want to use the native UI, but this isn’t okay either apparently. So are you advocating that every dev should implement their own alert modal?
But if the question isn’t about whether or not the suspect has the key, they’ll just be held in contempt for not complying with the court order to hand over the funds?

How the seed phrase is stored and accessed is irrelevant in such a situation. The court order is “hand over the money”, which is hardly an unusual one.

> I don't think that a US cop has ever "seized" the contents of someone's mind, and I don't believe that a bitcoin wallet can be considered hidden evidence, because the contents are on a public ledger

I don’t think this is different from ordering someone to hand over the money in their foreign bank account, such a situation is likely to also involve passwords stored in one’s mind.
That would be infeasible for cold storage.
Is this [1] relevant here?

Edit: I am asking because I know that there are better alternatives than matomo. But there still needs to be some alternative for 'oldschool' hostings with LAMP stack.

[1]: https://matomo.org/faq/new-to-piwik/how-do-i-use-matomo-anal...
I grant you one more year, my boy. Use it well.
"What are the incentives to advance amd become highly skilled? Take doctors. Some are really passionate about what they do. Most may be a little passionate, but are mainly just intelligent people drawn by the money and prestige. Assuming medical school and university still exists, for what purpose would someone go through that pipeline when they could do something far easier?"

This is the argument I usually don't understand. Sure, it's hard. But well working in heavy industry is hard. Working customer service is damn hard. I'd be happy to read a lot of books and sew someone's wound up and get fed for it.

Maybe a better argument is why doctors and nurses get paid so differently. You probably need more nurses than doctors for a medical procedure. But the supply of doctors is lower. It's not that being a nurse is easier. It'd that the people who become nurses often don't qualify as doctors.

For me, things I'd qualify for might be writing, cooking, drawing, and programming. One of these pays far more than the others. Cooking professionally is probably a lot harder and yet more fun, but the economics don't add up. I can serve maybe 100 people a day at a restaurant, but I can serve millions/day writing code.

I think there's a kind of moralism here where people want to think they're richer because they had to sacrifice more. But often it's because they lucked into a well paid skillset.
It feels risky to have my data stored anywhere else other than the EU. Feels like my data is just up for grabs anywhere else with no clear privacy protection. Imo EU is the best place to have your data.
I do hope those efforts succeed. I think the parent meant to state "hasn't gone away," but even if they didn't, the point remains if you replace that.

I hate the CFAA, to be clear; it's just definitely still the law.
Win32 API is frozen in Windows XP timeframe, no wonder it is stable, all major new APIs since Longhorn failure are based in COM.
It sort of depends on how much they're offering. Hiring contractors to build features might be an option. (As someone who's been freelance it's rather common practice)

An alternative is to spawn a new UX to the app... Be careful here.
At one place I worked we spawned a different private version of our app that made it possible for big clients to whitebox. We called the team "commercial".
Different UX, different pricing for users of the different UX. It worked rather well. They paid for the changes to the UX for their "white box".

Where we went wrong. We should have called them markets. That is my one bit of advice. Call the different UX a different market.

Then you get something for free. You get to go international. Instead of just "Wallmart" being a market, and "Target" being a market. (with different language, different fonts, and different assets (including emails). You GET UK being a market, and Sydney being a market, and ...

If you do it right, you have a pattern for building things for different business, and different geography. Win win.

Final cheat code.

If you eventually plan on breaking your database into many different DB's don't go fancy on the user_ids. Just change the sequence to increment the ids by 100, instead of 1, and all users built in region/market 0 get n00, while users built in region/market 1 get n01, and so on. It's not so you know where the user was built, it's to guarantee uniqueness of the ID. It's a pile easier than changing your whole system to UUID's.
If the model training is designed to profile just one user, no, the model won't work by design. What you describe is an attack on the privacy of that user and we do want to make sure they fail.

The way differential privacy works with machine learning is that it guarantees that one given record cannot have a significant impact on the weights of the models and therefore on its performance. In the particular case of SGD-based models, the guarantee holds for every step of the descent. A good place to start on the topic is Abadi 2016 (https://arxiv.org/pdf/1607.00133.pdf).

What is important in the approach is that we don't need to detect that there is something funny in the loss function of the model. Sarus uses the exact same approach whether the model or the loss function is malevolent or not. The guarantees still hold. This is important because a lot of models can extract personal information even with no intention of doing so and no real way to detect it.

A good way to think about model performance is that we are looking for models that perform well irrespective of one record. If there are many users that have the same pattern of the user you are trying to spy on, the model may still be good but you won't know whether it's because of that user or not.
> This is a straw man argument

Argument for or against what, exactly? It's a statement of fact.
> whose name derives from its original key components: cocaine/coca leaf + kola nut

Funny how the addiction is spelled out in the title, yet it is probably the most recognizable beverage name in the world.
Yes, also then. If company A's app and company B's app happen to have some code in common, but one of company A's employees is found to have reverse engineered company B's app, then company B has a very nice case for suing company A for copyright violations.

Now, if you do it and no one finds out, that's one thing. But telling your manager (worse case, in an email!) becomes a potential liability, as the company has to keep such records and provide them to the other party in case of a suit.
That's a really cool concept I hadn't considered. But ... Too futuristic maybe? I think this operates somewhat closer to a syscall/ABI than a calling convention/FFI than you'd expect.
really curious if they're calculating my life expectancy based on my age, or just based on average lifespan in my country.
You have to believe him...plain simple ;)
CSS Scroll Shadows
Delaware begins annual battle with mosquitoes
Three Headed Jesus
Absolutely not, we don't need any more of that.

I've lived in Europe my entire life and things just got worse regulation wise. Every year it feels more and more like living in a totalitarian regime.

Social media is a tool like any other, the problem is that parents aren't there to educate kids. Oftentimes because both parents are working or because they're single parents.
Please report them; they're helpful. But there's a huge difference between finding a vulnerability, stopping, and reporting it, and finding one and continuing to dig.

If you report it immediately, often you'll even get asked to dig further; but doing it on your own without authorization is the problem.
I think there is a fine line between iteratively developing your product as a whole and leaning it completely toward your biggest customers. It might not be ideal to turn your product development team into a software solution team that trying to meet every customers' needs.

> These are in general good ideas that we'd like to build anyway in time.

Meaning these features are already somewhere in your product roadmap. How about just share your future development plan and give them access to professional customer support? Anything further than that like shifting development effort to their needs completely just feel wrong in a product point of view.
Sell your most valuable features, not your dev team.

> Are there alternatives means of partnering with customers that would give us the resources to develop faster without loosing our focus on the overall product and commitment to quality over deadlines?

This might be highly unrelated due to different business model, but for my previous startup I stuck in the same boat for a while. Eventually, I made part of my product open-source, build a community of fans that love the product. Afterward, the development support and contribution from the community is enough to keep the product going.
Does it matter what they think? Actions matter more than thoughts. Even the person responsible for this hasn't done anything to stop or reverse the decision.

> NBC 7 spoke to the man who originally posted the picture on Twitter. He has since deleted his account and said he may have gotten "spun up" about the interaction and misinterpreted it. He says he never intended for Cafferty to lose his job.
Apparently I have a 1239% chance of dying in the next year from self-harm and a 2481% chance from substance abuse. Seems about right.
Past discussions:

https://news.ycombinator.com/item?id=29549173 "Lapce – Fast and Powerful Code Editor written in Rust" (333 points | 3 months ago | 145 comments)

https://news.ycombinator.com/item?id=30526693 "Show HN: Lapce – open-source code editor inspired by Xi-editor" (7 points | 15 days ago | 2 comments)
If he was doing it from the company network and company devices, almost surely, unless he got extremely lucky and their internal monitoring is pretty bad (unlikely at a bank).
Soviet chess school was all about individual highly intensive mentoring. There was no mass chess education.
When you do this, you have to live by the combined constraints of both transports. It's not necessarily wrong, but having different mechanisms which are optimized for the specific constraints of each is also valid.
Rather than hacking an election to change the vote totals, a more subtle attack would be to program the voting software to detect whether the election is going your way or not, and if it isn't then it can trigger a crash. This assumes the perpetrator knows that their party's voters are more motivated to turn out for the re-vote (possibly after another round of targeted advertising).

Remember, this is a country which in 24-hours pushed through a law which allows the government to secretly conscript companies into backdooring their own technology. "Required hacking activities could include: altering, copying and deleting data; intercepting and modifying communications; surveilling networks; and changing account credentials."

https://tutanota.com/blog/posts/australia-surveillance-bill/
More profitable. An Airbus 320 takes off with 25 tons of fuel. The LH2 bird takes off with 8 tons, and 17 tons of extra, paying cargo.
Russia moves to Seize hundreds of Planes from foreign-Owners
I believe my diet is not too different from the one of my grandparents, at least compared to their diet in the last 20 years ( I can't remember before I was 10, and I don't know what they eat before I was born ). The "modern diet" hasn't really catchup here yet
If you reach a bit over into IPC/RPC, rather than just linking, the options with decent IDL and cross language code generators start to increase quickly. For example D-bus, or androids binder. Some even use grpc or thrift between processes on same machine. All of these are of course operating one or two abstraction levels up but are still good to consider.
Not sure that “CDNs aren’t supposed to go down” is a very reassuring point, nor one that Deno’s authors would make in its defence.

Deno’s vendoring approach isn’t like a stopgap in case third party servers go down. It’s the ’right’ way in Deno, and is another brilliant fix to Node’s approach.

Node always makes you go through a formal step to install a dependency - and then you’re still reliant on npm’s CDN being online during your builds anyway. The only way to break that build time dependency is to use a clunky, nonstandard hack to check in your node_modules, like yarn 2.0 or pnpm, which then takes you right off Node’s “golden path” (such as it is) and creates loads of incompatibilities.

Deno’s approach is the best of both worlds.

1. With Deno you can import direct from a URL with no formal install step, which is great for prototyping. The caching engine makes it fast without a need for every little toy project to have to have a giant node_modules folder.

2. Vendoring your scripts provides a dead easy, golden-path way to make your project completely non-dependent on third party during build, ie gives you same advantage as using Yarn 2 or pnpm in Node, but as a first class citizen of the runtime, so it’s efficient and standardised and will therefore not have tons of ecosystem incompatibilities.
Good to see it has VIM bindings.

But without an Emacs like Lisp Machine, no can do ;)
> think of a movie where that happens, probably because it's impossible

Always reminds me of a CSI (original series) interview with the actor who played Grissom; the writers contacted the police and forensics labs for story ideas but the real life events were so insane that they would feel too fabricated for television.

People are generally greedy and often dumb; maybe they found an open house door, put a little note in the mailbox, slept on it and thought maybe they could get away with a further peek inside if no one closed the door yet (which makes the perpetrator think they didn’t read the note yet)?
This was fifteen years ago. I realized that something was coming up and decided to sell fonds titles. I opened the online banking system and sent the order. Two days later the crash happened.

Have I been lucky? No.

The bank patiently waited three days before executing the order.

I am afraid they immediately sold the titles and kept the difference. After all no risk here. If the prices would have went up they just would have backdated the sell. I realized why bankers are rich. They have the power and can turn the game to their profit. They just have many possibilities to tweak something such that I lose. </tinfoil>

Ten year later I retried somewhere else, crypto, to realize that the same crowd is also in crypto.

Luckily I didn't go all in. Twice. I can afford the losses.
If by "such things" you mean trying to see how your competitor implements their product, no, that is certainly not the kind of personality you want to work for you (assuming you are not some unethical hack like Uber, of course).
I've read it before, fantastic article. I agree that using QUIC is better for the purpose. Still I'm curious whether TCP hole punching worth to support direct connection for UDP blocked environment. Maybe TCP hole punching also won't work on such environment?
There is even the xcore cpu by xmos has CSP support in hardware.
Putin has been doing it since at least 2014 (along with the more conventional though due to nuclear deterrence more ridiculous threat of "visiting Berlin again").

It's just that until last month it was taken as just posturing to remind the West and the Russians that Russia, as a nuclear power, has to be taken seriously.
Heat Pump
The average russian citizen supports the war