skysight-inc/HackerNews huggingface dataset:
> There is unsecure code hidden in every project that uses any programming language ;)

Security isn't a binary :) Two insecure code bases can have different degrees of insecurity.

> I honestly wonder how many of these security vulnerabilities are truly issues that never would have come up in a more "secure" language like Java, or if the vulnerabilities would have just surfaced in a different manner.

I don't know how memory safety vulns could manifest differently in Java or Rust.

> In other words, we're constantly told C and C++ are unsafe languages they should never be used and blah blah blah. How much of this is because of the fact that C has been around since the 1970s, so its had a lot more time to rack up large apps with security vulnerabilities

That doesn't address the veteran C programmers who say they can't reliably write secure C code (that's new code, not 50 year old code).

> Are these errors due to the language, or is it because we will always have attackers looking for vulnerabilities that will always exist because programmers are fallible and write buggy code?

A memory safe language can't have memory safety vulnerabilities (of course, most "memory safe" languages have the ability to opt out of memory safety for certain small sections, and maybe 0.5% of code written in these languages is memory-unsafe, but that's still a whole lot less than the ~100% of C and C++ code).

Of course, there are other classes of errors that Java, Rust, Go, etc can't preclude with much more efficacy than C or C++, but eliminating entire classes of vulnerabilities is a pretty compelling reason to avoid C and C++ for a whole lot of code if one can help it (and increasingly one can help it).
Why can't Mozilla offer a a way to make a recurring donation, Patreon-style, or Github-style?

It should be locked to specific projects though: Firefox, Thunderbird, MDN, experimental projects, etc.

Of course introduce gold / platinum / titanium / etc tiers for corporate donations, along with donations from private persons.

They are already a non-profit, making this tax-deductible would be a piece of cake.
It depends.

Run the lifetime cost of a CPU, and compare it to what you pay your engineers. It's shocking how much RAM and CPU you can get for the price of an hour of engineer time.

And that's not even all! Next time someone reads the code, if it's "clever" (but much much faster) then that's more human time spent.

And if it has a bug because it sacrificed some simplicity? That's human hours or days.

And that's not even all. There's the opportunity cost of that engineer. They cost $100 an hour. They could spend an hour optimizing $50 worth of computer resources, or they could implement 0.1% of a feature that unlocks a million dollar deal.

Then having them optimize is not just a $50 loss, it's a $900 opportunity cost.

But yeah, shipped software like shrinkwrapped or JS running on client browsers, that's just having someone else pay for it.

(which, for the company, has even less cost)

But on the server side: yes, in most cases it's cheaper to get another server than to make the software twice as fast.

Not always. But don't prematurely optimize. Run the numbers.

One thing where it really does matter is when it'll run on battery power. Performance equals battery time. You can't just buy another CPU for that.
{} were added to the 1967 revision of ASCII, along with `|~ and lower case. (EBCDIC never got them in the base character set, only in alternate ‘code pages’.)
There are 220 billion lines of COBAL in production. Much of the most essential banking infrastructure in the world runs on COBAL, and is likely to indefinitely.

https://www.bmc.com/blogs/cobol-trends/#:~:text=According%20....

The only way we stop using COBAL in production this century is to have some kind of apocalypse, or maybe an apotheosis.
i don't think i seen a more effective destroyer of wealth than crypto of greater transfer of wealth to conmen than with crypto
> cults do not want their members to leave

It doesn't necessarily work this way. For example, some cults get rid of members after they stop being useful (able to pay money or work for the cult). If you get burned out or seriously sick, if you get unemployed, and if you already donated all your savings to the cult... then you become a burden. The group will kick you out under some pretext, e.g. accuse you of being an unrepentant sinner.

Sometimes the members are psychologically unable to leave. Imagine being in a cult since early childhood (your parents joined the cult), having all your family in the cult, not having any friends outside the cult (because you are forbidden from associating with non-members). Imagine knowing that if you leave the cult for any reason, everyone you know will be forbidden to talk to you. In such case, kicking you out is a serious threat. Also, if the cult believes that members get to heaven and non-members get to hell, and you believe it too, then you are also afraid to be kicked out. You can keep threatening people, if you know there is a 99% chance they will get scared and obey.

(I am not saying that this applies to the group described in the article. Just objecting against the general idea that if a group threatens to kick someone out, it is not a cult.)
Copper is actually a reactive metal, will leach into acidic liquids, and is generally not permitted for restaurant use for this reason.
Companies don't like alternate or parallel authority structures inside the organization. This is why there are anti-fraternization rules, for example, because it can be abused.
> Does Apple offer “offline” versions of their updates in DMG form?

.app bundles, but only full updates not deltas.

When using Reduced Security instead of Full Security, online verification through TSS isn't necessary to install/update an OS.
> The most effective founders are not nearly as confident as the least effective founders are...If that’s you, remember it is likely a signal of growth, and not of inevitable failure.

This was good to know. I constantly feel that imposter syndrome, especially as we grow and I am trying to keep my leadership skills at pace with our team size.
Yeah, they need to find an IP lawyer who will take this on contingency and sue them for everything they have.

It's blatantly obvious theft and they'll keep doing it until they get smacked down in the legal system.
Time really flies by! I was referring to you guys moving all enterprise features into the TSL/Community license.
Reddit needs a new way to monetize.
I’d even put up with crypto bullshit if they just stopped the ads.
And no one but you is claiming anything about manuals being beamed into brains. I disagree with the idea that MacOS is any more intuitive than any other modern OS (which is the claim that Apple and that I've heard others, make; I'm not saying you are making that claim necessarily). And to bring this back on point, to my very specific original comment, the poster I was responding too said this wasn't "hidden behind a keyboard shortcut" when it most definitely was. Not sure we need to delve into the nitty-gritty of how people learn OSes in this thread anymore than we have.
In my GitHub profile photo https://github.com/jart you'll see me holding a stuffed toy I call greenbean which has been cute little work desk companion of mine for some time. Later on I came into possession of a stuffed red lobster. A Chinese friend of mine suggested the name redbean as a companion for greenbean. Later in 2020 I was writing demo programs to showcase the capabilities of Actually Portable Executable. When I decided I wanted to write an HTTP server, redbean was looking up at me on my desk. That's when the idea clicked and it's been redbean ever since.
Generally, no. For companies, no.

Nepotism in government is restricted at the federal level, and most states have their own rules about it too. But in the private sector it is common and not illegal by itself. Think about it: if nepotism in businesses were illegal broadly, it would end the concept of family run businesses, and make small farms even harder to sustain. This comment is in reference to the U.S., where Triplebyte normally operates.
> At trial, the district court ruled that Microsoft's actions constituted unlawful monopolization under Section 2 of the Sherman Antitrust Act of 1890, and the U.S. Court of Appeals for the D.C. Circuit affirmed most of the district court's judgments.

> I teach antitrust to grads and undergrads.

Consider updating the curriculum? My understanding is that the bundling was actionable because they were considered a monopoly.
I’ve been using it happily for over a year with no real issues. But I do share your concern. I like the variety and choice of WMs on Linux and the Gnome / Wayland crowd do seem to add friction to the other contenders.
Since High Sierra (released 2017), their documentation points to the App Store installer links instead of to DMGs [1]. It’s still possible to create a DMG installer for newer versions using createinstallmedia on the command line after downloading the installer to a Mac.

[1]: https://support.apple.com/en-us/HT211683
Weird. I don't use Spaces (this is the multiple desktops thing, right?) but I've just tried it and it's not laggy at all for me. I turn on the reduce motion thing, so it fades between them rather than swiping, but neither feel laggy.

(I'm on an M1 Air and I think the performance is great)
> Also, the Windows OS is flaming garbage. Possibly literally malicious. I don't know how they stay in business.

You don't have to be best, just better than the alternative.

MacOS comes with specialized set of hardware. So good luck tailoring Mac, without it costing like an average Ferrari.

Linux is just worse for average user. Not average HN user, mind you. But people who struggle to figure out print screen.

I fought with Linux in the past. It's death by thousand gremlin bites.

Big part of that is lack of drivers, but there are also major fractures in the space: Gnome vs KDE, X.org vs Wayland, etc.
There are bigger problems with the evolutionary argument: AFAIK, catnip is first attested in Italy, and I have not seen anyone discuss finding a lot of catnip in the historical ranges of Felis lybica, that domestic cats come from; how can they have evolved to exploit the benefits of catnip if it's not there while they are evolving? Seems like you'd need a lot of wild catnip for such a selective behavior to evolve, but in the deserts where they live, there might be none. (Catnip isn't a particularly desert-tolerant plant.) Then you have the fact that something like a third of cats are immune to catnip & it's highly heritable, even though if it's a good insect repellent (that's quite fitness-relevant), there's really no reason for it to not have reached fixation quickly and become a 100% frequent trait. Further, catnip response across all of the Felidae species is super-inconsistent, with very far flung species showing some catnip response but also closely-related species showing very different responses; if it's under selection, they ought to be similar, and anyway, there may or may not be catnip where Felis lybica grew up, but then what about South American felines half a world away...? Finally, if you feel that you need an evolutionary explanation, then what is your explanation for all of the other cat psychoactives like valerian, Tartarian honeysuckle, silvervine, the Indian one, and so on? If you don't think there is one, and that, like most human psychoactives, it's just because biochemistry is really complex and stuff happens, then surely that shows catnip didn't need one either.
why isn't 1970-01-01 more common?
> They're just seeking pleasure, they don't know jack shit about what plant chemicals are increasing the survival of their species.

How do you know? Many animals, including cats, are capable of thinking strategically. Cats in particular are very aware of scents. I don't know all the reasons they roll in catnip, but don't see why it's absurd to think that they do it partially for self preservations reasons.

Similar to this, cats will often rub against their humans after they return home. They specifically rub scent glands against their human to add their own smell back into the mix with all of the new ones.

It doesn't seem like a large leap to think they alter their own smell for practical reasons beyond getting blitzed.
I gotta hear this. How does Bitcoin solve the Big Tech issue, especially the self-preferencing part?
This Techdirt piece describes that lawmakers fixed none of the problems and actually exempts a lot of actual monopolies such as telecom (Example: AT&T and Verizon) and retail (Example: Walmart and Target): https://www.techdirt.com/2022/05/27/senator-klobuchar-fixed-...
Multiple issues here:

> I'm not sure why we're talking about atrazine in an article about the different chemical, BPA.

It wasn't a top-level comment, further down the comment tree the subject can diverge - I responded to a comment about Alex Jones, not the specific endocrine disrupter in the article.

> ... invented in 1958 and gender dysphoria existed before then, I think your hypothesis is incorrect.

This doesn't logically follow the comment it replied to, the parent comment in no way claimed that endocrine disruption was entirely responsible for sex dysphoria, but wondered whether it was "largely responsible".
> We’re trying to create a marketplace that can open opportunities for engineers who wouldn’t otherwise have them

Provided they're in the US. My experience as a European has been: more or less everything I apply to ignores my application. I haven't checked recently, is it changing?

I'm not implying you're wrong since you used the word trying to create. Moreover, you didn't specifically specify which group of engineers you're trying to create opportunities for. I don't even want to go in a right or wrong type of frame, because it doesn't matter, but my lack of eloquence might give that impression.

What I am implying is that the statement is a bit broad. On a more emotional (perhaps even non-rational) note: I feel spoken to yet left out, for years now.
I don’t believe orders of magnitude is achievable in general. Even python, which is perhaps the slowest mainstream language clocks in at around 10x that of C.

Sure, there will be some specialized program where keeping the cache manually small you can achieve big improvements, but most mainstream managed languages have very great performance. The slowdown is caused by the frameworks and whatnot, not the language itself.
Orders of magnitude more Native Americans assimilated into the colonial population than chose to live on reservations.
> Of course there are, but it seems obvious to me that greater LGBTQ+ acceptance recently has led to people being more open with that side of themselves, rather than it being the result of environmental pollution.

Why does that seem obvious to you? Additionally, even if it's true, it may not be the only cause in rise of cases of gender dysphoria. Additionally additionally, it's also possible that some change in our environment has affected the prevalence of "LGBTQ+ acceptance" in the first place.
“A lot”?

What sort of ”legitimate traffic” comes off AWS/Azure/DigitalOcean et al?

And how does the volume of that (and relevance of that traffic) compare to home add and mobile CGNAT ipaddresses?

Unless I’m selling something, dropping all cloud instance IP ranges doesn’t em like it’d block a lot of “legitimate traffic” to me, at least not enough to care about. If my choices were “spend time implementing a more sophisticated locking technique to reduce blogspam” or “write more blogposts”, I’d be triggerhappy blocking everybody using AWS o browse from and writing more content.

I use FSecure as a VPN, and I see it “do weird shit” at about the same rate as I see when I’m using a Hertzner box as a wire guard endpoint. (Most common thing there is I can’t order via menulog when I’ve got a vpn endpoint out of I am getting it delivered to, and I’ve just got used to switching off my phone’s vpn while ordering..)
It seems very much to me as if Musk doesn't know what he is doing. If this is feliberate it looks like he is trying to reduce costs to make Tesla's stock price go up again.
How does a real estate owner make more money by not collecting rent?
I think I've been using that shortcut for as long as I can remember. In web development circles it's certainly common knowledge, as you always end up in a situation or two where you need to reload without cache, but you don't want to clear the entire browser's cache.
There are many dozens of theorised locations for Atlantis, tye Azores is only one and not a particularly compelling one over any of the others IMHO.

The Egyptians at that period and before were far, far worse sailors and navigators than the Greeks, or pretty much anyone else. I really wouldn’t trust anything they would say about distant geography or navigation.
Really nice seeing this commit, that I pushed this morning to Github, on the frontpage of HN a few hours later :) It's awesome that other people are just as excited about open-sourcing as we are. But if you like this definitely keep an eye on our blog[1] and/or twitter[2] for the upcoming "official" announcements. They will have a lot more info on this and all the other cool changes things that are part of Citus 11.

[1]: https://www.citusdata.com/blog/

[2]: https://twitter.com/citusdata
I'm very sure that a consortium of FANG type companies could get together and design a shared interview for generic technical skills, and then run normal interviews for candidates that pass that step. And when I say normal interviews, I mean the stuff that an individual company should want to do, such as behavioral, talking about past projects, etc. Making candidates do leetcode type sessions at every place they apply is a waste of time for both candidates and companies.
Bridging the gap between the young bloods who knew the specifics of hot new technologies and the old dogs that had been designing systems for decades.

One cohort knew what tools to use, the other what design patterns to follow.

Each group had their own pre conceived notions to overcome and some pride to swallow.
Design Patterns in Machine Learning Code and Systems
You can also easily stitch something like that together yourself.

After `brew install pngpaste tesseract` (the latter is a dependency of the great OCRmyPDF tool btw), you can set `alias ocr="pngpaste - | tesseract -c debug_file=/dev/null stdin stdout | pbcopy; pbpaste"`.

I like having this alias better than macOCR because the workflow feels more ergonomic: You first cmd + shift + 4 to select text and then type `ocr` with the result being printed to stdout and being saved in your clipboard. With macOCR I have to go to the terminal first to initiate the process, then go back to what I want to screenshot etc.
It's worth trying again after some time has passed. I have one cat that had no interest in catnip for years, but later developed a love for it.
What can go wrong with untrained office workers setting up steel forges in their back yards or performing car services.

Also why does a Tesla even need service other than a quick safety check. It’s not like the brake pads should be worn fast with regen and there’s no oil to change.
Good news, you'll get both!
Oh ffs. First off, I'm not from the US. I've been there for less than a month combined. Secondly, if you do want to nitpick, at least do some research first. The video in question is 60 or 30 fps depending on the quality setting.

$ yt-dlp -F https://www.youtube.com/watch?v=j_4iTovYJtc
[youtube] j_4iTovYJtc: Downloading webpage
[youtube] j_4iTovYJtc: Downloading android player API JSON
[youtube] j_4iTovYJtc: Downloading player df5197e2
[info] Available formats for j_4iTovYJtc:
ID EXT RESOLUTION FPS │ FILESIZE TBR PROTO │ VCODEC VBR ACODEC ABR ASR MORE INFO
─────────────────────────────────────────────────────────────────────────────────────────────────────────────
sb2 mhtml 48x27 │ mhtml │ images storyboard
sb1 mhtml 80x45 │ mhtml │ images storyboard
sb0 mhtml 160x90 │ mhtml │ images storyboard
139 m4a audio only │ 46.85MiB 48k https │ audio only mp4a.40.5 48k 22050Hz low, m4a_dash
249 webm audio only │ 49.06MiB 51k https │ audio only opus 51k 48000Hz low, webm_dash
250 webm audio only │ 63.84MiB 66k https │ audio only opus 66k 48000Hz low, webm_dash
140 m4a audio only │ 124.33MiB 129k https │ audio only mp4a.40.2 129k 44100Hz medium, m4a_dash
251 webm audio only │ 125.02MiB 130k https │ audio only opus 130k 48000Hz medium, webm_dash
17 3gp 176x144 8 │ 56.70MiB 59k https │ mp4v.20.3 59k mp4a.40.2 0k 22050Hz 144p
160 mp4 256x144 30 │ 37.86MiB 39k https │ avc1.4d400c 39k video only 144p, mp4_dash
278 webm 256x144 30 │ 42.59MiB 44k https │ vp9 44k video only 144p, webm_dash
133 mp4 426x240 30 │ 84.31MiB 87k https │ avc1.4d4015 87k video only 240p, mp4_dash
242 webm 426x240 30 │ 70.03MiB 72k https │ vp9 72k video only 240p, webm_dash
134 mp4 640x360 30 │ 167.27MiB 174k https │ avc1.4d401e 174k video only 360p, mp4_dash
18 mp4 640x360 30 │ 352.24MiB 366k https │ avc1.42001E 366k mp4a.40.2 0k 44100Hz 360p
243 webm 640x360 30 │ 134.68MiB 140k https │ vp9 140k video only 360p, webm_dash
135 mp4 854x480 30 │ 294.98MiB 307k https │ avc1.4d401f 307k video only 480p, mp4_dash
244 webm 854x480 30 │ 233.37MiB 243k https │ vp9 243k video only 480p, webm_dash
136 mp4 1280x720 30 │ 653.31MiB 680k https │ avc1.4d401f 680k video only 720p, mp4_dash
22 mp4 1280x720 30 │ ~795.07MiB 808k https │ avc1.64001F 808k mp4a.40.2 0k 44100Hz 720p
247 webm 1280x720 30 │ 548.72MiB 571k https │ vp9 571k video only 720p, webm_dash
298 mp4 1280x720 60 │ 817.18MiB 850k https │ avc1.4d4020 850k video only 720p60, mp4_dash
302 webm 1280x720 60 │ 651.39MiB 678k https │ vp9 678k video only 720p60, webm_dash

And the units? Hz and FPS are generally interchangeable but FPS is more often used as a measure of how fast something renders while Hz is more often used for monitor refresh rates (a holdover from CRTs I guess).
In my experience, this wouldn't be needed if the rest of the app ran at native speed. There would already be a natural delay that would be noticed by the user.
Here's Mike Masnick's response over on Techdirt on that. A big swing and a miss which is rare on Oliver's part: https://www.techdirt.com/2022/06/14/john-olivers-big-whiff-j...
Yes we plan to add more containers
If humans wait, yes. If you can just buy another server: no.

I 100% agree on saving human time. Human time is expensive. CPU time is absolutely not.
That was true of our process as it existed in 2017/2018 (and was a part of why that business was not viable). At this point, what we do is develop tests (backed by psychometric models). These are more accurate than human phone screens (and especially more accurate at finding people who have strong skills bad "bad" resumes)
Actually interested - are there multiple allegations against EM other than the recently reported horse-for-handjob offer?
tolerance break? Haha
Alternative chemisitries are many, and are actively developed; here's a 2021 overview: https://www.mining.com/non-lithium-battery-chemistries-to-gr...

What I can't predict is when some of them will become competitive enough to matter, and thus used in some large infrastructure projects.
Exactly the sort of thing I would expect the (paper?) richest person in the world to say. Obviously money is worthless to you when you have more than you could ever need.
Not right now. It's definitely something that's on our radar, but it'll take a while to get there.
It's not a real union and he wasn't an employee.
Huawei has argued that sanctions against their company constitute a bill of attainder.[1] The provision that an executive can have 100% of their income from the company seized, though, is arguably a criminal provision. But looking at the history of bill of attainder cases, this probably won't be considered one.

[1] https://sgp.fas.org/crs/misc/LSB10274.pdf
Figma Postmortem – Service disruptions on June 6 and 7 2022