skysight-inc/HackerNews huggingface dataset:
I made no "in general" applicability claim and have, on the contrary, explicitly acknowledged assumptions & limitations various times in this thread which you write as if you have read. Mentioning every limitation is impractical. GNU parallel also doesn't work "in general" (e.g. no
Perl interpreter). My concrete benchmark was safe/reliable in context - until you added bugs. Adding bugs to GNU parallel examples is also easy - I already did one by accident.

Your link to atomic writes and your bug addition seemed pretty targeted/informed. The GNU grep --line-buffer was also in plain sight in my benchmark. Presumably one must know pipes to know when GNU parallel's own --line-buffer is helpful. So, your "wow" outrage seems fake/off point and this GNU parallel sales pitch of "background knowledge free lunch" seems more false.

You also seem to have missed (twice!) the main thrust that, unless I am missing
some other --go-fast flag, GNU parallel is so slow on this common task that the
easy serial method is much faster even with 16 cores given to GNU parallel. GNU parallel would have to be over 3X faster for your correctness concerns to even matter relative to serial xargs. People don't usually use parallelism to slow things down - unless
maybe they blindly use GNU parallel.

For the curious, perf ratios are actually even worse for the high volume "grep t" example made safe (21.8X slower rather than 19.4X slower - on my test machine). xargs --process-var-slot (around since 2010) is enough of a hint for anyone actually curious and there is real value to having someone solve that little puzzle themselves for their own use cases. Doing all your homework for you can take something away. If you are too confused and a paying customer of Ole's, have him update his docs to be less unfair to xargs. (Also no need to link to my own posts and refer to them so generically. I only have one account, as per HN guidelines
which, as a brand new account, you should maybe familiarize yourself with. [1])

As to why GNU parallel is so slow - Dunno. Took just as long with that -u flag to allow mixing output. Perl/Python programs are often 20..500X slower than compiled to native code. Python at least has like 10 ways to compile it. Curious if it
was only code search, I tried that x10000000 example in the xargs comparison doc and got only 1.2X scale-up over serial xargs with 8 whole cores which also seems really slow/bad. So, GNU parallel slowness seems like probably a common problem.

This isn't just "complaining". I have already highlighted 4 risks (no Perl, invisible /tmp filling default, non-drop-in xargs, slower than serial). The oddball
nagware license creates at least a 5th/6th legal/financial risk. Not sounding so safe to me. Being giant with many features generically creates more "accidental attack surface". So, there may be many more buried in GNU parallel. Different tools, different risks.

[1] https://news.ycombinator.com/newsguidelines.html
Oh I can probably come up with many use cases. Business models? I'm not sure.

I could use it for...inspiration, stock images for a demo site, actual images for a live site, t-shirt designs, coffee mugs, and those drop shipping products, podcast or album artwork, etc.

Yes, maybe design starts to blend, yet lots of web designers used Bootstrap and Material Design so that sites started to look the same anyway. Maybe it'll just be things looking the same except with more artistic images.
Can you store a .git/config filepath in a git repository, either via the cli or manually hacking the repo data files?
Not really any sort of realistic alternative by this point but a distinction between 'programmatic git' where everything is explicit and 'interactive git' that has all the implicit config conveniences would have probably made some difference. It doesn't prevent the specific problem but provides space for less draconian fixes.
So they excluded all the new accounts and unregistered voters, and only got 70% of the vote for reasons that are all solved with education.

Thats… medieval.
The issue with lists like this though is privacy is implied by merely using the software and not from the fact you control the server.

For most people self-hosting isn't an option or something they want to do.

Software should be developed with E2EE from the beginning wherever possible.
Please tell me what is possible to buy from tiktok app. I have used this service only from web.
US cryptocurrency expert jailed for helping North Korea evade sanctions
Network shares on corporate networks come to mind, they don’t need to be git repositories either (and presumably chowning all files to 1000:1000 would hit the large majority of Linux users even with this fix)
Thanks for the kind words. I feel lucky to get to work on it. And I’m on the same page regarding subscriptions. I much prefer to own my tools too.
It's the first one, though it's hopefully hard to find actual software that has that problem unless you're intentionally seeking out versions from around 2012.
You can buy the gift cards with cash, pay for the app with that and get legitimate money in a bank account.
Wait, that's a weird list: "greedy corporations, billionaires and leftists" will push their own views and morals? Why do you conflate those things? In the US, leftists might want crazy things like universal health care. I do agree there is huge danger in programming systems and letting them make choices. But we already let it happen in things like letting software trade stocks and move the market (triggered by signals, causing unexpected behavior).
Seems like the most minimalist. Maybe too minimalist though?
Haha! Great idea! Thank you for the feedback, I'll try to figure out how to write TV app when there's more time.
Are there any data binding libraries (deserialization, marshaling, pickling libraries) that do not have the class of weaknesses as the two CVEs (CVE-2022-22965, CVE-2010-1622)?

My understanding is as follows.

- Spring uses WebDataBinder [0].
-> CVEs: CVE-2022-22965 (Spring4Shell), CVE-2010-1622
-> CVE Fixes: First deny-list approach (2010), then partial allow-list approach (2022)

- Struts uses OGNL.
-> CVEs: CVE-2017-5638 (Equifax breach), and others
-> CVE Fixes: deny-list approach (-2017-)

If there are any for Java, can they be used with Spring Boot (Spring Framework)? Maybe there are some for in another programming language?

[0] https://docs.spring.io/spring-framework/docs/current/javadoc...
> Special DataBinder for data binding from web request parameters to JavaBean objects.
This is really dismissive. Unexpected execution is not a users fault, and can happen for a variety of reasons (you telling me you’ve never unzipped a full git path someone sent you?)
> Oddly enough, dependency injection isn't that popular in Python

Because you don't need dependency injection in python. You can mock out any object anywhere during your tests.
Something to search through files, like "grep", but allowing combinational logic like "find" does. That would allow you to, for example, find files that contain "remote", and, "machine learning".

Obviously this can be done with a little Python/Bash script, but a command line utility that supports this would be nice.

I was going to write this utility myself, until the part where I had to implement the parsing of the combinational logic (since it can be arbitrarily nested/chained), and I didn't find tools in the language of my choice (Rust) back then to make that easy.

I did find a rust library to do just that yesterday[0], so I myself might get on it!

[0] https://github.com/zesterer/chumsky
> when did ambrosia leave the scene?

Hard to point to an exact date; it was a gradual process. The web site finally went offline in mid-2019, but the company had been essentially dead for years before that -- they hadn't released any new software since 2013, or any updates since 2016. Most of their game library never even got ported to OS X, so one could argue that the process started as early as 2002...

> I remember BBedit, RESedit, and the one i miss the most, graphic converter.

GraphicConverter is still around! https://www.lemkesoft.de/en/products/graphicconverter

The OS X version always felt kind of clunky to me in a way that the classic version didn't, though.
Why Is U.S. Inflation Higher Than in Other Countries [pdf]
https://en.m.wiktionary.org/wiki/goated

WebP matters because it’s supported by every browser and by every image editor worth using.

We still don’t know if JPEG XL will survive or die like XR did. After all, it’s competitor AVIF already works everywhere except Safari.
Stories like this make me wonder how well full disk encryption really holds up. Maybe LUKS is good, but I don't have 100% confidence that FileVault or BitWarden aren't backdoored. Of course in the UK, refusing to give the password is a crime, so some jurisdictions have you either way.

Also, in this day of the internet, why would you need to travel with your laptop if you store the compromising data on a secure server, and then download it on a fresh computer when you get where you are going.
The law is alot more flexible.

I’m in the non profit space. There isnt a single thing they would have had to do with crypto donated to them. So yeah they could have ridden it up.

Even investing rules and guidelines from the state and fed exempt donated assets from them completely.

Non profits just lack an incentive to learn how to do anything well, and are often staffed by people that have never had to consider market forces.
Man, I would love to use this in a game that procedurally generates events
As a child AoE 2 brought me a deep curiosity to learn about history. The class room style learning was so awkward. I think I did a small scenario about the evolution of a city and did my first if/else on the map editor.

The next thing which upped my will to learn more about history was Wikipedia. Those endless link chains. Did I love that.
Tips to creators.
In the case of a multi-user machine, e.g. in a library, you expect there to be low privilege users with filesystem access. This bug introduces a way for them to do privilege escalation and potentially run code as root, which you did not intend.

Generally, you still want these additional protections even if you don't expect others to have access to a machine. Can't say if one or the other is a bigger problem. I think they are all components of having a secure system.
> Subjectively, I'd say WebP and the newer AVIF or HEIF does a better job than Jpeg (to my eyes). However, I could see why others might disagree.

They can do great with a clean original. But with an original that was already carefully mastered in JPEG format, with quality set to the bare minimum to get a good output... well, lossy compression is lossy, and when there isn't any margin for more loss, the results won't be good. (It's also true that since different lossy algorithms are, well, different, the interaction of two algorithms can be truly awful to look at).

Unfortunately, there are very few image editing pipelines which let one master in anything other than JPEG, PNG, or GIF.
My wife is a (professional) musician. She has achieved some organic popularity and her music has been in TV/movies, but having some songs featured on curated Spotify playlists has been one of the most profitable things for her career. Musicians rightfully complain that spotify pays fractions of a penny per play, but if your music ends up on a front-page playlist for months/years you can at least make many thousands of dollars.
I'd rather have JPEG XL personally. The other one that's really cool is Basis Universal, which is unique among compressed image formats in that it decodes directly to a GPU compressed texture in VRAM, resulting in way less memory usage and bandwidth consumption when the image is displayed. That's right, it remains compressed even as you view it!
Similarly is the Beach Boys where one brother never left the studio and wrote all of the music while the other guys learned to perform the tunes to take on the road.

Not quite the same, but in that world though
It turns out when you do allow anyone on the internet to sign up to your community to vote on what it does, you get the FCC net neutrality ballot stuffing, so I can't blame them
It’s interesting that some of these unbundling articles have started popping lately. I believe there was recently a Airbnb unbundling blog.

IMHO, if anyone wants to unbundle, FB is a prime target. They’ve grown big and acquired companies , and are distracted with the whole Metacrap, that it is high time someone picks use cases apart to do them better and well.
It's indecipherable to most people in the U.S. who refer to it as "military time".
That’s my take too. Nobody will care for a AI generated painting made with no effort by a computer.
Something new, where human effort with an opportunity cost remain, will arise.

Perhaps non-perfection will become the new trend vis-a-vis the opposite today?
It's not square. It's usually cut in 4:3 format.
Stop trying to make Python Java.
Dunno how "hidden" some of these are, but here are my list of interesting hacky or explainy channels with a twist:

Applied Science:
Unusual chemistry / physics / misc engineering
https://www.youtube.com/c/AppliedScience/videos

NileRed:
Unusual chemistry experiments
https://www.youtube.com/c/NileRed/videos

Styropyro:
Lasers
https://www.youtube.com/c/styropyro/videos

Inigo Quilez:
3D rendering and mathematics
https://www.youtube.com/c/InigoQuilez/videos

Mike's Electric Stuff:
Weird equipment teardowns and electrical engineering
https://www.youtube.com/user/mikeselectricstuff/videos

Captain Disillusion:
VFX / hoax debunking and education
https://www.youtube.com/c/CaptainDisillusion/videos

Retro Game Mechanics Explained:
Technical dives into old-school console hardware and software
https://www.youtube.com/c/RetroGameMechanicsExplained/videos

Tantacrul:
Video essays on music topics that sometimes go completely off the rails
https://www.youtube.com/c/Tantacrul/videos
Have you tried https://aidungeon.io/? It creates novel events with GPT-3.

I'm sure some gamedev will add DALL-E for visuals to a game eventually.
It should have opened with their definition of fake.

But, apparently, it's music that the streaming services are commissioning at cut rates and using their platform to promote, as to reduce their costs?
I was watching the news last night and they interviewed an older woman who left her high paying finance career to work as a florist. It's far less pay, and she finds her life much more rewarding and happy now.

Based on your post, you would look down at her florist job and think it's unfortunate she never achieved her dream in life. Meanwhile, she realized her dream, and she left her high paying comfortable career to achieve it.

In short, stop making assumptions that other people have the same dream as you or want to be in your position. Not everyone thinks a comfortable job is the definition of success or happiness in life. You know nothing about these people, their families, their friends, their hobbies, or their goals. It's really rude to assume they need your large tips or that they have a less fulfilling life. You'd probably be surprised how many of these people have no interest in trading places with you.
Isn't it the reverse for the vast majorit that live to see retirement?
Ask HN: How to keep coding while moving up the ladder?
I have a question for HN that I ask myself ever since I started a career in software engineering for robotics:

How do you keep writing code and solve interesting problems while still climbing up the career ladder?

Is this even possible?

How do you respond to a leadership promotion that you know will involve 95% of your time writing powerpoints, making excel calculations, planning a budget, negotiating with different parties inside your company and the client, planning resources, etc.?

How do you navigate and mold such a career?

You don't want to be (seen as) that sad cliché programmer who only wants to be in front of his terminal all day and has no ambitions whatsoever.

I know there are more technical leadership roles that leave some room for technical work but I find it very hard to do both as the project managing often requires bursts of work here and there and disturb deeper problem solving sessions.

I really wonder how people who would like to keep coding and solve interesting problems still can have an ongoing career as software engineers without having to move into management roles and how to navigate this.
My personal experience with generics was to port a parallel circular queue library (used to take interface{} and require a type cast at every use) add an experiment to build all the Lodash slice and collection functions in Go.

Happy to say that both worked really well. Took me less than an hour to understand the system enough for these purposes, and the implementation hides neatly in the library - the code that uses the library has absolutely no mention of anything generic. Having generics also helped switch to cleaner implementation inside as well, because I could now use maps as well without type casts.

Looks like a solid useful system - I could do everything I wanted, all the complexity stays in the library, and changes were pretty minimal and easy to understand. Would recommend.

https://github.com/sudhirj/cirque

https://github.com/sudhirj/slicy
The fact that WebP is widely supported, supports lossy compression, and lets you make images with alpha is a killer combination.
No, much more thinking of broken CI systems and other deployment scenarios where a shared user setup is presumed.
I don’t understand what you’re trying to say.
That's not what we are talking about. I simply point out wrong assertions.
How to install new termux from GitHub?
Agreed. The same thing happened with GPT-3. The waitlists for OpenAI products are always obscene. The TechnoSiliconValleyTwitterPersonality elites always seem to get next day access. But normal people who aren’t chronically online seemingly never get access. Not very Open of them.
I don't know, it really doesn't sound like a real CVE - maybe add some setting I guess for those worried? Others bring up good points, if your attacker can write to C:\ you probably have other issues.

On top of that, it breaks completely valid functionality - someones 'bug' is someone elses feature.
I think it all depends on the problem. If it is known how and what the code need to do, like transform the input in a particular way, then the data structures will naturally follow from actions. But if actions are not known or too abstract, like show a graph or create an app to calculate taxes, then defining data structures first will be beneficial as it allows to make actions more detailed.
"Originality is the art of hiding your source"

Harry Roolaart
> There just isn't the incentive to use cryptocurrency to donate to Wikipedia.

Sure there is. A lot of people have lots of value tied up in crypto, a very liquid asset. It’s also easy to send. I know nothing about wiring money to Ukraine, but I know how to donate to Ukraine organizations that accept crypto. If crypto is a small part of your revenue stream, maybe it’s because you haven’t nurtured it as a donation channel.
Suspicion of Insider Action at Coinbase
Their arguments are so debased that you can only respond with humor. So I sympathize that some users call her chairman Pao. The screech from Reich is full of contradictions. The truth why someone like Trump can have success is because the talking heads of his opposition are just not good enough. Not too complicated and explains a lot.

Someone who does care for social justice might have difficulties to support Elon Musks power over social media. Not him specifically perhaps, but Billionaires who are indeed pretty safe from politically motivated fallout. But on the other hand it is also kind of self defense at this point to not let people with worse ideas take such positions.
If you're going back to the fifties it was worse. It was common to have a model on the cover that is white when the artists are not just to sell albums to racists.
Perhaps "casual" is the wrong word since it does have a pejorative implication. Put more neutrally, what I find fascinating is the asymmetry b/w the weight of process applied compared to impact. I am sure the individuals concerned thought very hard about it (I could not find the discussion on the mailing list, but from what I can see it may have been kept off the public list due to the security aspect).
As the author, I'd add logtop:

tail -f /var/log/nginx/access.log | cut -d' ' -f1 | logtop

as a live updating replacement for a |sort|uniq -c|sort -gr|head
I read it as saying they actually got topographical line-like structures in the MRI, similarly to the well established result that there are typographically-arranged visual neurons that essentially light up like pixels in response to a scene.

So if that’s right then they are actually measuring a spatial encoding. Anyway, it’s just the abstract so I could be completely wrong.
Would it not be tedious to mark each cell as constant or input parameter? Perhaps it would be preferable to just ask the fine user when copying a cell with a formula?
That's such a cool website! Definitely, if someone focuses on photography, I am not fully into the field to know the best practices, simply trying out new and small things that I find around.
Human curation is where you get the taste from.

As far as something to play with to get interesting ideas, and to take a first few cuts at implementing them, DALL-E is great. Then let's bring the human's technical skill and ability at curation into the mix.
What will be the best way to backup and restore cloud instances of Jira and Confluence?
tail -f will hang around and output new lines that appear in the file.

fzf will receive that input and in this case accumulate the new lines that have come in from tail -f. It will then stay around, present an interactive full screen text ui, and let you interactively filter the set of received lines based on substrings you enter at the fzf prompt. This while continuously incorporating new log lines coming from the pipe, from tail -f. The +s just says not to sort the lines, keeping the matches in the same order they appeared in the logs.
The issues arise on the definitional level.
Defining “nice” is impossible as far as I can tell. Especially for a computer.
But also too inflexible.
Not really the point - they have 5% market share with those B2B products, and a history of axing stuff that they don't think makes enough money.
haha, from the headline I thought this meant they would stop accepting new wiki pages about cryptocurrencies, and thought "huh, I guess it makes sense" :'D