skysight-inc/HackerNews huggingface dataset:
If there is an rm executable in the current directory, and also one later in your PATH, the second run might use a different rm that could do whatever it wants to
I don't think the world is quite so bad.

x86 processors solve this by speculating about what's going on. If you suddenly run into a 1976-era operation, everything slows down dramatically for a bit (but still goes faster than an 8086). If you have a branch or cache miss, things slow down a little bit.

One has a few possibilities:

- A static analysis /proves/ something. print is print. You optimize a lot.

- A static analysis /suggests/ something. print is print, unless redefined in an eval. You just need to go into a slow path in operations like `eval`, so if print is modified, you invalidate the static analysis.

- A static or dynamic analysis suggests something probabilistically. You can make the fast path fast, and the slow path eventually work. If print isn't print, you raise an internal exception, do some recovery, and get back to it.

I'm also okay with this analysis being run in prod and not in dev.

As a footnote, JITs, especially in Java, show that this kind of analysis can be pretty fast. You don't need it to work 100% of the time. The case of a variable being redefined in a dozen places, you just ignore. The case where I call a function from three places which increments an integer each time, I can find with hardly any overhead at all. The latter tends to be where most of the bottlenecks are.
Nice list. One change I would make for the CRUD example is to do a Todo list instead since it might be more useful/doesn’t teach bad assumptions about names.
Imo, key reason for fairy tales is that both adults and children want to have fun. I watch movies and read books to have fun. Some of what my kids watch is written with proper moral lessons in it, but plenty of it is pure fun or with anti-lessons.

The people in the past had no youtube and no tv. They still wanted to have some fun.
They host "scripts" and "apps" that you can execute against "resources" (i.e. databases etc...). So basically a lightweight, online environment for running code without any deployment?

I suppose an example might be marketing has a DB of prospective customers and this would allow devs to quickly write scripts to clean it, apps to allow people to add to it and automated tasks to trigger events (eg. an email) based on certain metrics etc...

I guess it means being able to rapidly build fairly throwaway systems for internal use.
I guess. It's only a trick in the sense that life is meaningless, and question itself implies that there is some universal truth that we're all blind to or something.

Let's phrase it in another way: what is the meaning of rocks? How about the meaning of trees, or birds? Nothing, ostensibly. They just exist. Similarly, I think we take sentience to equal life in this regard, and what is the purpose of that? Nothing much, really. It's just a consequence of our predator/prey relationship with the rest of the world, now being applied to the ideals of civilization and human progress. That, in and of itself, is meaningless. We're a product of our environment, one of the great joys of human life is that you get to make up meaning for yourself. Some people ultimately aspire to be respected by their peers. Others find meaning in tending to the earth around us. There is no ground truth for the meaning of life though, I think that's silly.
Your average user is more concerned about losing their password than they are about authenticator sovereignty. Moving towards cryptographic primitives for auth versus shared secrets is a net benefit versus current state.

> but having multiple keys right now is a huge pain, but I'm not excited about "just sign up for Apple and that pain goes away" because I sure as hell don't trust Apple not to cause me pain in the future.

Compromise is necessary, and probably a bit of regulation from government to enforce good outcomes from exception handling. Passkeys need to be stored and managed somehow, and your average user does not want to do that, just like they don't want to run their own mail server, syncthing instance, or mastodon instance.

EDIT: (HN throttling, can't reply) @signal11 You can already be locked out of all of those accounts without recourse.
Hard disagree. Or rather, faith, in anything, can be as you describe (a non-religious example being politicians), but it doesn't have to be (and shouldn't be).

Whether a person is optimistic or pessimistic in the face of unknown is a matter of faith. Values/morals, even outside of an organized religion, are still a matter of faith (not that they'll be rewarded, but that they're somehow better, even in situations you'd be advantaged by disregarding them). That there is value in life, in expression, etc, are all matters of faith, as for every bit of rational evidence that there is benefit in them, there is also rational evidence that there are issues in them. The fact philosophers don't end up in the same place indicates there are, at minimum, different axioms over what is valuable or necessary in the first place.

Whether faith happens to also include a concept of god is immaterial; most if not all of us operate under concepts just as immaterial but which nevertheless we believe in.
I don't see why they don't throw away the model and train it again after making changes. It only took them 1 month.
Tips for early-stage startup growth without hiring a growth team
The company was lucky to have someone like you that could actually sort out real problems efficiently. I would bring up this story when negotiating for a raise.
yes, definitely for me nim has replaced python as my go to language even for small tasks.

I find it even more productive than python thanks to the typing system. An often neglected highlight that I appreciate a lot is the fact that static typing + procedure overload has the additional benefit that names of functions tend to be very natural (you can reuse the name of function if the type signature is different). That along with UFCS (universal function call syntax), allows to create great apis in no times. Also template are a very easy way to boost productivity and allow to write great DSLs. See also an old but still relevant and very valid introduction of Nim for Python programmers [0]

It can work with numpy and even better there is a performant numpy replacement called arraymancer. Take into account that since you do not need to be afraid of loops, even working with standard sequences is very performant. See also the SciNim getting started book [1]

[0]: https://blog.zdsmith.com/posts/nim-for-python-programmers.ht...
[1]: https://scinim.github.io/getting-started/
The creator of Polytopia, Elon Musk’s favourite video game
How is spotify going to avoid becoming another amazin?
Elon Musk is a highly creative individual, but I worry he has bipolar. I myself have bipolar, and his actions and things he’s said in the past seem to indicate he might have it too. He seems be in a manic phase at the moment. (He’s actually said once that he thinks he might have it).

If he doesn’t have psychotic phases and how bipolar is not so strong, he can be a high performance individual but I think it’s something he will eventually have to take a look at.
Record Linkage on People's Names with Approximate String Matching
Not commenting on whether you’re right or wrong, but that’s a bit of an apples and oranges comparison there - nearly to the point of arguing in bad faith.

A more apt comparison might be a story about urban war where the main character looses many immediate family members (and explores the grieving process against the backdrop of the war) - and how that would help a kid process the loss of an immediate family member.
My comment has no value judgments, only an observation. They refer to a service as a "piece of shit" and sarcastically deride EC2.
Well maybe only 50% of women
Mermaid is great for keeping simple diagrams in Markdown documents, and GitHub very recently started supporting it. Beats taking screenshots and uploading PNGs to the repo for sure!

For those using VS Code, this GitHub Markdown extension also renders mermaid: https://marketplace.visualstudio.com/items?itemName=bierner....
Fully wrong, which you would have known had you bothered to read it. Additional data does NOT account for the increase in mental health issues.
This is exactly how most web applications were written 15 years ago. Server side rendering with PHP, ASP, JSP, and then Javascript for the interactive bits.
I didn't fast, I consumed less fat sugar and salt and played soccer but ate at the normal times.
Agreed. The only thing JS has over WASM is that you don't need to ship a language runtime or standard library with your application. The counterpoint is that the JS standard library is pretty anemic so the savings might not be that great, and applications might need a more recent runtime version than the host offers (e.g., Java applications often bundle the JVM so they don't have to worry about the version installed on the target platform).
Stories definitely do help kids and adults process trauma.

I'm not going to go searching for it because you can cherry pick anything off the internet, but it's well documented that scary stories in a safe space assist children with processing traumatic events.
Please sir don't blame Python for a PhD's NumPY mess.
Google allowed 6 character passwords for a while, and didn't expire them when they increased minimum to 8 for google workspace accounts. This has been fantastic, as users can remember their password forever even if its higher complexity (google does a password strength eval). No rotations either.

I'm pretty confident google will pick-up someone trying to brute force a 6 character password. That google will notice connections from new / different IPs or browsers. That's because google asks for my 2FA in various situations but doesn't annoy me by asking for 2FA all the time.

I use one govt system that has something like a 14 character password requirement. For even more security if you don't log in for 90 days your account goes inactive and the password EXPIRES! Very secure you say? Well, to regain access you have to provide the answer to a security question - favorite pet! That's a 5 letter word that doesn't change (and is probably pretty guessable).

Here is another example:

"(b) Information systems must be designed to require passwords to be changed not less frequently than
every sixty (60) days." - SBA IT Security Policy - 90 47 4
Connecting to the Salesforce Analytics APIs Through Node.js – Brian Cline
Samsung's new dashcam memory card records non-stop for up to 16 years
Arkansas Engineer Wins Project Jengo, Cloudflare Wins at the Patent Office
To ensure that the files are actually are downloaded (step1), before deleting the original (step2). I would make make step1 an input to step2. That is step2 cannot work without step1. Something like:

(step1) Download video from URL. Include the Id in the filename.
(step2) Grab the list of files that have been downloaded and parse to get the Id. Using the Id, delete the original file.
It also works fine with Aurora, as long as you have binary logging enabled.
All right, you win
I meant the institutions named "European Community Something": ECSC (coal and steal), Euratom, European Economic Community.

Those preceded the EU, but were already intended to end up in tighter and tighter integration.
Don't be afraid, they're wrong.
It's the markup language supported by GitLab MR and Wiki; that was my first contact with it: https://docs.gitlab.com/ee/user/markdown.html#mermaid

According to a top-level comment, GitHub also supports it, too, now: https://docs.github.com/en/get-started/writing-on-github/wor...
I feel this too. People have different needs. I had an ex who despaired at the idea of marrying me because she didn’t want kids with autism. To me, I’m fine, my kids would be fine, and I don’t want any stigma or to be seen as defective. I just want the same respect anyone else gets, and an ounce of understanding.
Other people, however, really struggle, either themselves or to help someone close to them. They don’t want their situation trivialized, and need effective help. Striking this balance will take a mindful culture, and the field can help much in guiding that, along with the other benefits they bring with research and interventions and such.
Nice list! How can I get https://cascade.page on there?
I guess in the long term the product will at least pay for itself, in the short term it will just be a marketing campaign and gives people a good reason to switch from their Amazon stack in case they don't depend on things like EC2-S3 transfers. When comparing to Backblaze B2 [1], Cloudflare's storage cost is 3x but you don't pay for egress as a tradeoff (compared to 0.01$/GB for Backblaze).

[1] https://www.backblaze.com/b2/cloud-storage-pricing.html
I wouldn't say OP's take is not true, but simply based on anecdotal evidence from a very small sample size. However, I still disagree with that take personally.
Fun fact: USB 2.0 webcams have been existing for over 10 years. USB 2.0 is 60 MB/s.

A pixel of an image is 3 Bytes. A 1920x1080 FullHD image is 6.2 MB. At 30 frames per second, second of a FullHD video is 186 MB. How did they do that?

Answer: frames are transferred as JPEG files. Even a cheap $15 webcam is a tiny computer (with a CPU, RAM, etc), which runs a JPEG encoder program.
... and Shopify stock goes down by 17% today... (not sure whether it's related or not)
I'd have been toast. Not because I'm an evil chauvinist, but because I'm a typical geek who took half a lifetime to get comfortable with making eye contact with, actually pretty much anyone, but particularly women.

But technically competent. Luckily I did get hired for that.
That's also how I remember it. It changed when Facebook became popular around me. Myspace, Tumblr, Twitter (my group of friends had it way before Facebook) were all about "nicknames" and random pics as avatars.

But a strange thing happened with people I knew was that after FB's "Real Name Policy". Anyone who kept using a pseudonym was viewed as outdated at best, sometimes a downright weirdo. Only people part of Twitter/Tumbler niche communities kept using fake names.

I also remember around the 2010s a "friend of a friend" bragging about reporting someone using a nickname to Facebook and having Facebook accept the report and force the person to change.

Interestingly, some teens that I know are sort of going back to that. They don't have Facebook, if they have Instagram, it is just random pictures of objects, more like Tumblr was, no interest in being influencers.
> There are effectively no Nazis in Germany

Gee, I wonder why people are downvoting an obvious fascist stooge.

[1]

> Twenty-nine police officers in the western German state of North-Rhine Westphalia have been temporarily suspended after their unit was found to have shared extreme rightwing content on a WhatsApp group.

> Images shared by the officers, most of whom are members of a unit in the town of Mülheim an der Ruhr, reportedly depicted Adolf Hitler, the swastika flag, a collage of a refugee inside a gas chamber and the shooting of a young black person.

[2]

> A far-right extremist has confessed to murdering a pro-refugee German politician who was found dead outside his house on 2 June having been shot in the head.

[3]

> A gunman killed nine people in two apparently racially motivated shootings at shisha bars in the German town of Hanau, police said. The suspect then killed himself, according to officers, after also killing his mother at his home.

> [...]

> The Bild newspaper said the gunman had expressed extreme rightwing views in a letter of confession he left behind. A video in which he explained his motives is believed to be part of the investigation.

----

[1] https://www.theguardian.com/world/2020/sep/17/german-police-...

[2] https://www.theguardian.com/world/2019/jun/26/far-right-susp...

[3] https://www.theguardian.com/world/2020/feb/19/shooting-germa...
Without making any explicit argument for it, what I see coming out of Fido and U2F are really changing the importance of the long-standing "something you have, something you know..." mindset around security. That prior mode was not helping us design system that take human capabilities of the user into account.

Prior security seemed to focus entirely on attackers, and their agency, and what they could potentially do. But we also need to pay attention to what users can do in order to build a secure system. Requiring users to read domain name strings, potentially in Unicode, every time, and make sure they are correct, to prevent phishing, is a really bad design. Instead, have the website authenticate themselves to the user, automatically, and have the machine do the string comparisons.

Similarly, the distinction between user and password for a biometric doesn't make much sense in this case. It's neither. The user is identified by a different mechanism, the biometric is merely a way for the device to see that the user is there.

There are always lots of attack modes for biometrics, but they are convenient and good enough to capture nearly all common and practica attack modes. And a huge problem of the 90s and 2000s security thinking was focusing on the wrong attack modes for the internet age.
You could just have an Amazon option where third party was not included. Just split the brand.

The problem is they built it into the main UI with no care for distinction or customer appraisal of what is going on. And now they have this mess.
I used to play guitar and recently I've started producing EDM and rap beats. Can't agree more with you.
It seems like there's a three-way connection that forms in a musician's head between the note on the page, the sound the note makes, and the muscle memory for playing the note. Each connection is strengthened by different types of practice, and supported by each other, but often with the way we teach music the kinetic is a proxy between the aural and the visual; this is especially true of people who learn mechanical instruments.

One way to boost the aural/visual connection (when you already have strong aural/kinetic and visual/kinetic connections) is to pick up instruments that are very different from the ones you already know; I would think this is the goal of music education programs requiring basic proficiency with piano and singing, regardless of the student's main instrument. Once you have to learn a new set of muscle memory associations to go from the same note on the page to the same note in your ear, it starts to break down the strength of the muscle memory associations.
I very much doubt you would ever work with or for me.
It’s not just accessibility. I’ve last track of the number of times I’ve seen a mobile website with a table that extends past the right side of the viewport and zoom disabled. You can’t scroll, and you can’t zoom, so you can’t read the table.
I think the real question is "How much money is Amazon extracting from users?"
"London bridges falling down."

"Ring around the Rosie... and we all fall down" (refers to the Great Plague of London in 1665)

"Rockabye baby in the treetops" (eventually sent crashing to the ground by storm winds).
The Business Trust Engine – Lum Network's Sarah-Diane Eck Speaks
Couldn’t agree more. I took a level cut when I went to Google from Microsoft after being assured by the recruiter that, as a tech lead, getting promoted would be easy. Unfortunately due to two teams using the same code names I was put in Ads, last place I wanted to be, and took a non-lead role in another team instead. It quickly became apparent that the game at Google was very dysfunctional, and the “manager-bias” problem they were trying to avoid, while sometimes a real problem, was still a much better system that Google had cooked up. I lost interest in trying to get promoted and tried to focus on interesting work for the next four years. Meanwhile, I saw crappy engineers around me get promoted (and sometimes immediately use their new level to jump to Facebook) while hard-working engineers who cared about glue work, quality and meeting customer needs get overlooked (and sometimes leave too in frustration). Combined with having line managers with 16-25 reports (rendering them effectively useless), it was a pretty broken culture.

(This was 6-10 years ago; I know some things have changed, but I hear from people there it’s still crazy).
I do indeed make the choice to not work in the defence industry as opposed to helping building such systems. So in effect, yes I do nothing. I can't argue that the military does not to some level protect me - I do believe that in my (western EU) country the military and the arms trade is almost exclusively, right now, dedicated towards either atrocities, proxy wars, or selling to Saudi Arabia et al. Call me naive and argue that without these things my loved ones and I would be at risk, but I could never personally support the current system we have, and I question the degree to which those who believe they are doing good, on average, are in fact doing so.
It can't be done. No computer will ever create a story plot with a novel idea, and by novel I mean "new." No computer can ever do anything new and this is by design, since they only operate on programmed instructions.

Any book or painting or music by a computer is only the output of preexisting code and contains nothing that isn't already in the code or data supplied to it.
Elon Musk’s antidepressant tweet puts people at risk
> It’s extremely difficult to keep high data integrity of the Amazon catalog when all these 3rd parties are contributing information. It gets abused in every possible way.

So you're saying this isn't a technical problem that can be solved by a technical solution?

> It’s all automated

Well I think you found the problem then.

Sears never had this issue because they have humans who do this. They also never had the scale that Amazon has achieved because of those humans.

This is Amazon's blindspot. I'm super bullish on $SHOP because of this.
> Just waiting for the search bar to shop every Shopify store.

That's exactly what my startup [1] is making. We have 395,000 shops at the moment. Love to hear any feedback.

[1] https://www.delomore.com/
Lots of XMPP clients support E2EE/OMEMO out of the box now. If you think XMPP is outmoded you should try it again some time. I recommend Conversations on Android.
> they also take security seriously,

Despite what most people think, banks are often a really long way behind on security. Banks don't care about security of any individual customer, merely security of the bank as a whole. That means if 0.01% of customers lose all their funds due to credential stuffing, it isn't an issue - the bank will just refund them if needed.

Unlike say ssh with key authentication, where it would be a total failure if 0.01% of attackers were allowed to login without the key.
Looks like a user agent concern.
I have trouble maintaining eye contact with anyone. Though I agree that our industry has a bad track record of gender equality and needs to improve.
My first contact with Mermaid was in Typora, and it always worked well enough for me.
Good write-up and it is quite a neat feature. We wanted to use it in the library I work on to model how a method of our class mutates an argument to add new properties to it (IIRC, it was a little while ago), but hit an issue that you need to explicitly type the instance of the class for this to be usable – that is, a user can't write "const assertingInstance = new AssertingClass()" but instead has to write "const explicitAssertingInstance: AssertingClass = new AssertingClass()". We decided that this was going to be too inconvenient for our users, and so pursued a different API direction.

I raised an issue and Ryan from the TS team gave a good explanation of why this is so, and why it's unlikely to change in the near future (performance penalty of doing the analysis required), but I thought I'd mention it in case anyone is looking to use this feature and might hit the same issues. The TS issue is https://github.com/microsoft/TypeScript/issues/47945 if you'd like to see more details.