skysight-inc/HackerNews huggingface dataset:
Chromium had a few problems, they're public so we can go read the changes made and look at the context.

In a lot of places in Chromium the impedance choices are arbitrary. You have a raw pointer but need a string or vice versa. Ownership isn't the problem, so in Rust you literally just always choose &str for these APIs and pay nothing. A team who design their API taking &String in this situation get the same treatment as a team who name all their types Data1, Data2, Data3 and so on. Somebody senior fetches the water spray, "No. Bad programmer".

You might be outraged, surely C++ programmers also never get this wrong. But nope, happens all the time as Chromium illustrates.

Added: One cause that shows up in my review is this:

C++ strings know how long they are. The raw pointer does not. As a result if we have lots of people asking if their thing is "some text" it's tempting to demand they give us a string, since if the string's length isn't 9 we don't need to look at the text itself. It's an optimisation! Rust's &str knows how long it is.
Always friendly. Life is too short.
Rambling on a donation NFT drop. Diary of a coder
The thing is, Nier Automata doesn't try to be a novel. I mean, it's not even that subtle, game all but tells you that it tries to experiment with storytelling in the medium in the first 30 minutes.

Also, you sound extremely prejudiced and close minded:
> Novels, while being ficitonal, allow you to explore inner worlds of other people and complex interactions between them (and there's nothing more complex in the universe and at the same important to us than humans and interactions between them)
How do you even argue with that? Can you somehow support this claim?
Though from reasoning like this i can deduce that you must hate House of Leaves, and kinda understand why you dislike Nier Automata.
There's a lot of ambiguity. Yes, many people outside the US use the term to refer to people from the US in general, but technically Yanks/Yankees are only the people from New England (the Northeastern US states). Someone from the US South or West aren't Yankees.
Programmable Array Logic
> decrease worker efficiency by encouraging repeated Covid exposure leading to both more short term leave due to sick employees and less effective employees in the long run due to long Covid

PSA: this is wild speculation. There's no definition of what "long covid" is, and there's certainly no evidence that it is made worse by getting Covid more than once. If anything, the opposite is true: we know that repeat infections lead to fewer symptoms and milder illness.

Regardless, Covid is an endemic cold virus now, along with the other four circulating coronaviruses. It isn't going away. Everyone is going to get it multiple times in their lives, whether or not they work remote or in person.
Thanks! Here's where they talk about Buenos Aires (10m): https://youtu.be/0QotxGy4CKk?t=600

It's not totally clear to me what their purpose was. Did they just use Buenos Aires because that's where the book was set, without any deeper motivation?
Mostly anecdotal opinion as a Chicagoan —

Our tech scene has been largely driven by fintech and a few unicorns. And our unicorns tend to be much more bust than boom — Groupon being the highest profile one. Not sure if it's correlation or causation, but VC investment tends to be more conservative, and the ones I do hear about are mostly fintech.

On top of which, Chicago wasn't all that tech friendly. Pay has been rather stagnant, and promotions above senior engineer didn't exist before Covid/remote stretched everything out. The exception to comp has been prop trading firms, which make oodles of money but... trader culture dominates over eng.
You're not mistaken. Try http://http-login.badssl.com/ to see it for yourself.
This. This is so mind-blowing that in 2022 people, I presume knowledgeable engineers, don't care about their privacy and security, and willingly suggest to let ISPs and whatnot inject ads and even miners sometimes [0].

[0]: https://medium.com/@mxschmitt/crypto-miner-injection-on-inte...
Maybe you should implement a "feature" that serves a simple static HTML page <p>This webpage is safe.</p> to "bingbot" and serve the real page to everyone else.
The international fight over a 300-year-old treasure-laden Spanish galleon
This sounds terrible and I would leave this team fast. I work in a high performing FAANG team. Deadlines get pushed all the time
This is a great question because I find that when I use soft language like this, a lot of the suggestions get ignored. Sometimes that is fine but other times, I have to follow up after and explain that the 'suggestion' wasn't actually optional. I find it hard sometimes to protect egos and quality at the same time.
Ask HN: What is your day to day like?
For people who work in the tech industry, what is your role, level of experience, and what does your day to day look like?
I believe the chrome address bar defaults to https now: https://blog.chromium.org/2021/03/a-safer-default-for-naviga...
My "formula":

1. Try to find something positive to say about the code. This reinforces what is being done well and supports the notion that everyone is on the same team chasing the same goal.

2. I like to go deep into the "why", being as objective and fact-based as I can. Code style and "best practices" are sometimes confused with personal opinions and preferences. I avoid words like "I prefer". If I can't back up my opinion with strong reason-based arguments for why my opinion is objectively better then I keep it to myself and continue to ask myself if it's a personal preference or if there's a good reason for favouring that.

3. Tone must always be friendly, polite and constructive. Of your options I often go "I would extract this to a separate function because ..." and then I go into the "why"

4. Sometimes I have a lot of supporting information to explain a position. I will often label these "Academic Digressions" and then drop a TL;DR. Sometimes people don't have time to read them right away but I'm often told that people appreciate them and save them for later.
Often times idealic and well-intentioned measure have negative consequences. Just look at how the EU's cookie banners have eroded the UX of the open web as an example.
One way to manage this is to use HSTS to send modern browsers to https and leave older browsers to whatever they want.

a) put your content on www.example.com because it's important

b) redirect http://example.com to https://example.com because this is required for HSTS preloading. And from there to https://www.example.com because it's important that your contentful urls be at a domain that isn't going to redirect.

c) serve hsts preload headers at least for https://example.com; serve hsts headers for at least https://example.com/favicon.ico

d) set your favicon on all pages to https://example.com/favicon.ico

e) submit to the hsts preloading site

f) remove redirects from http to https on www

Modern browsers with preload built after your site is added would always use https. Modern browsers without the preload will load whatever the first page they hit as http, but pickup the preload from the favicon and future page loads will be https. Resources from the first load will likely be http, depending on favicon loading timing. There's no additional MITM risk for modern browsers, because a MITM could avoid your redirect if an http load is attempted just as well as they could mess with your HTML.

Older browsers can still go to the http version, although inbound links are likely to be https, because people like to cut and paste from the URL bar, and most people are going to have a modern browser with your site preloaded. Users of older browsers would need to edit the url in the URL bar, a skill they'd likely rapidly develop.
> You're only wasting virtual address space, not actual RAM.

Fair enough, that's true.

> And of course the WASM runtime already needs to trap for invalid addresses (eg, -1 right out the gate). How would trapping the first few pages be any more expensive than any other unmapped range?

Memory locations are presumably all unsigned, so -1 is not an issue. The thing I'm saying is that you're turning a test that was `if (addr < LIMIT)` into `if (addr != 0 && addr < LIMIT)`, which is not nothing. And it's on EVERY memory access.

Thinking about it, there's no way you could rely on the MMU to be the ONLY memory check obviously. Like, the JIT can't translate a reference to `x = memory[ptr]` into just a `mov x, [BASE + ptr]`, because it could reference non-WASM memory, which is obviously a security no-no (unless it could statically guarantee `ptr < LIMIT`). You need some kind of runtime check in addition for security and stability, you can't get around it. Given that, I think I agree with you, might as well just do it. It's, like, two or three extra instructions or something? But I would not say that it's free.
>Terry Pratchett's work is a good example of progressive ideas
For their day, sure. If told today, the humanising of, and sympathy with, police would get him removed from "polite" circles as surely as the creator of a wizarding franchise.
Does anyone out there remember / have more information on an effort to actually create the warp pipes in real life?

I have a very distinct memory of reading about this in Nintendo Power magazine in the late 90s / early 00s but have never been able to find anything concrete on the internet about it. I'm curious if I'm having a Mandela Effect type thing going on.
Pervasive traffic monitoring is an attack and it is an attack being carried out in massive scale. I believe HTTPS is the most meaningful and available method out there to stop this attack.

If your website does not support using HTTPS you are an accomplice in pervasive monitoring.
Websites already have to do that, because Safari still lacks a number of web technologies that get picked up faster on Chrome and Firefox.
I never considered doing a tattoo, but this looks like a great idea.

As for decorative tattoos, I'll wait for e-paper version, so I can change it when I want to.

And yes I know this beats the purpose of a tattoo being something permanent, but, if I ever do something like that, I'll be forever an Etch-a-Sketch
The problem I have with it isn't the few lines of code it generates, its the ingestion of the millions of repos from millions of devs, creating an AI model from that free code, and then charging for the product. I'm already a paying customer, I should get free access this thing that was built on free code and free labor that gives absolutely no attribution to the original authors.

my side concern (which may be overblown) is that this is the first step to completely replacing programmers and consolidating finances and power even further.

Edit:

additionally, I'm concerned about the "Death" of open source as in: if Microsoft can violate these licenses, what trust remains in the licenses? If people put restrictive licenses on their open source libraries, and now they know these can be violated, will they continue to support open source? And if so, what is the point of the license to begin with?
Digital Attack Map – Top daily DDoS attacks worldwide
I also started watching it without any expectations whatsoever (ran into it browsing free stuff on Prime), and was completely blown away by it.
No; my problem is when people are using the "open web" as a bludgeon to get Apple to allow Chrome on iOS. If you want Chrome on iOS, just say that. To pretend that there is open future of browser diversity once Chrome is allowed on iOS is underhanded.
A year ago, Co-pilot was in beta and wasn't production-ready. I don't think it should be held against Microsoft.
How do you go looking for recruiters?
That's kinda the point though - the argument being presented is AFAICT "people who aren't that serious about it should still not be randomly outed."

I'm not convinced that's practically tenable these days, but on a moral basis I endorse it and would present Scott Alexander as an example of why.
Like I said I've never had an issue. Most people that complain about Perl got filtered hard by references.
> * Even on static sites, HTTPS prevents a MITM from telling what pages you're reading, or introducing falsehoods into the content. It's not "overuse" to use HTTPS there.

I hear this argument again and again. You need to understand it's completely useless for websites where you are a passive consumer (i.e. you don't enter any information, just read articles and so on). And, frankly speaking, MITM attacks on passive websites are much rarer than errors related to outdated (and sometimes misconfigured) certificates. Enabling HTTPS redirect means the fallback is no longer working, and if the browser doesn't let you in, you basically lost access to information even though it is still right there, just inaccessible.[0]

[0] Yes, website owners should configure their certificates properly, the process is now very easy, you can add certbot to crontab and forget - but it turns out in real life it doesn't work like this.
> Their track record is flawless

There were clearly mistakes made. There were always going to be mistakes made in addressing a large scale disaster of a sort that we haven't faced in recent memory. Insisting that the response was flawless is idiotic, short sighted, and prevents from learning from those mistakes for the future.

The causes of the loss of trust in the US medical system are complicated and are due in part to all of: bad messaging from the CDC, reduction of personal relationships with doctors (especially in rural areas) and political opportunism.
> because in matters of principle leaving legal defense is as good as giving him to a kangaroo court. His penalty was obvious

Actually it's very different from a kangaroo court. The defense lawyer is there to make sure that the trial follows due process. Only those elements that should be taken into account are, for example, and only in an appropriate way. This is what is at stake in the particular case mentioned in the article: it is likely that the defendant doesn't know the procedures and therefore there is a real possibility that an unlawful decision is taken.

And of course someone had to be there to check if there are circumstances favourable to the accused, and make them available to the court. Even if the man is a despicable criminal, the court can only reach a fair decision if they go beyond the public image of the terrorist.
Different instruments can be used to capture different segments of the population. You’re right there are gullible people who are more likely to believe things with limited or no evidence. But it isn’t necessarily about the most impressionable people, nor is it about installing sincerely held beliefs.

Instead, what may be a cause for concern is simply the installation of doubt in an otherwise reasonable person because of the perceived validity of contrived evidence. Not so much that it becomes a sincerely held belief, but but just enough that it paralyzes action and encourages indifference due to ambiguity.
> Disables IPv6 by default.

um... what'd i miss? Why would i want this?
Instagram: Video selfies trial to verify age of teens
Angular without SSR is faster than Next.js with SSR
Arbitrarily prefer on bird over another, and believe that you can do something about it with passive-aggressive architecture. That is neither dog stupidity, zebra stupidity nor jellyfish stupidity. That is human stupidity in action.
If FB can tell when/if you’re pregnant it can also probably tell how likely you are to get an abortion. What’s to stop LEO from stopping at demanding raw data and start asking for algorithmic data as well.
It really shouldn't be. It doesn't take long or much effort to send a quick boilerplate email saying they're not hiring you.
> A blockchain could be a way to store and publish that signature & hash.

yes but it would be a bad one. We have multiple key distribution mechanism that are better for the use case.
To be fair there are journalists that don't just want to sell you a story. But the ratio of entertainment media and media with a serious attempt to inform people is sadly rather large.
I don't think that's a good argument... otherwise we would like to honor the prominence of JNZ, JNE, JL, LOOP and other "spaghetti code" constructs used deep in CPU models but that are just not appropriate for human readable code.
> They might want to be somewhat careful here so as to not piss off the provincial government. As a foreign, anglophone company, I’m sure there’s a rule or inspection they can produce if they need to to make Amazon’s life miserable.

I don't think the government will get involved at all. Seems they had these specific labor laws for decades. It'll just go to court and get settled there.

I doubt Amazon are the first to try skirting these.
Thank you Marsey, very cool!
Great wake up call for the modern world. We need more clean energy from within our own country.
The angry faces are likely a knee-jerk to what other people perceive as a "but sometimes!" response.

https://www.youtube.com/watch?v=GiYO1TObNz8

Not exactly applicable of course, but I'm just trying to give you an idea of where I think the disconnect comes from.

Honestly, I get it. How many people ask about the ethical concerns when it comes to having traditional utilities hooked up to their home? I've honestly never once thought about what my particular power company does to the environment.
This is a quick rundown of database indexes and transactions. Excited to continue sharing these notes with community!
The people should definitely get the training, but probably without the cert. The cert for certain things, like rescue in particular, should probably be validated by an external agency that isn't the school
I'll see your Enterprise FizzBuzz and raise you high-throughput FizzBuzz: https://codegolf.stackexchange.com/questions/215216/high-thr...
The JavaScript Specification Has a New License
Easy:

Start with "Consider..." in case it‘s not a must.

If it‘s a must, start with explaining the consequences, e.g. "this value must be kept in a request scoped context or there will be race conditions and other concurrent misbehavior. Consider putting it in a @RequestScope bean."
You can't just have your characters announce how they feel. That makes me feel angry!
It's still complete bullshit, rent has gone up not just mortgages.

They are also are ignoring inflation and all the companies using the Ukraine war and the lockdown to justify the price multiples.

While all are hitting record profits.

Rent, not mortgages, has gone up from 1k to 2.5k here. For a one bedroom apartment. Minimum wage here will get you ~2k/mo.

Minimum wage doesn't come close to hitting rents, especially when they have insane demands like you must make 4x the rent to even apply.

It's hilarious that landlords were crying they couldn't rent their places out because of coronavirus, then they increased their rents 2-4x, the places are still empty- as are the houses for sale, yet they seem fine with empty property now.

I'd always laugh at the articles saying there wasn't a grand exodus from California, as I see it every day. Still to this day, just not as many.

Where did they go? Texas for the most part. And what happened to Austin? Priced locals out. Now those Texans are moving, but not here, they can't afford the exorbitant prices of everything ($7/gal for gas!).

Many Texans are still making $7.25/hr. How tf can anyone afford to live with that?
Cell phones cost the same, power costs the same, rent is getting there, internet costs the same as here in California where at least minimum wage is ~$15/hr.

Poor people have been getting shit on since before the pandemic but now it's just evil what's happening.
They definitely have the capital to make it happen. Every time I boot up Safari after a MacOS update, I'm consistently wowed by how little of their revenue actually goes in to making a comfortable, feature-complete browser. It's almost like you're using a different, nerfed internet with Safari, but maybe that's just me being angry that uBlock Origin doesn't work anymore.
If you think there's another viable solution, please found a company around the idea and prove us all wrong.
Name a performance mixer with effects per track and bus, at least 12 channels, all channels available through a USB interface and a backing track drum machine? Even if you consider some of the boutique DJ mixers, they are very large and extremely expensive compared to this.

My two gripes with it are the minimal MIDI implementation and the tiny knobs for my thick fingers.
The load time is contingent on ping, for instance with TLS over TCP you need 3 full round trips to get a pipe that can carry HTTP, this is 3x as many as with TCP alone. In the author's scenario there's a 500ms delay, so naively that's ping of 250ms which is really high. In the case of HTTP/1.1 or asset loads from other origins, there may be additional connections that are made which will all incur the extra overhead as well, though the author's blog is served over HTTP/2 which wouldn't incur this cost for same origin asset requests. For me best case for author's blog (just the HTML via curl) is 250ms plaintext and 600ms TLS. What's more interesting is that plaintext is a lot more consistent for me because I have pretty bad packet loss and the HTTP request fits into a single TCP segment.
The most obvious difficulty in recruitment right now is the psychological unreadiness of people to look for and change jobs, to move to a new place. Many candidates have put their CVs away and refuse to meet. On the other hand, this is partly a plus - there are fewer vacancies in the market, and candidates have started to turn down job offers rarely.
Before this coronavirus situation, candidates came with offers from 5-7 companies; now, there is no excitement among employers.
People with some degree of knowledge already know that any photo could be photoshopped. People that don't care will blindly trust a picture of someone with a quote or caption saying whatever, as long as it fits their narrative.

This has been the case for photos for almost 2 decades. The fact that you can now do it with video or audio doesn't change that much IMO.
The Propriety Path Platform
Spoken like a privileged man!

What makes you think that this has no effect on the millions of people capable of giving birth in the US? What makes you think that this will have no effect on their partner, or the overall well-being of the child, once birthed?
My name is Matt S Trout. I regularly receive snail spam addressed to 'Ms. Trout'.

Buying the data is quite possibly more cost effective but 'far more reliable' is, I suspect, an overestimate of the quality of the data available to buy.
What Is Project Holiday?
That's why the new Top Gun is such a monster at the box office. It's a "woke zero" movie in which you believe the characters are actually competent because you watch them train. They're believable and you want them to succeed. It's just a fantastic action movie and is even better than the original. A great reminder of what Hollywood can do when it's firing on all cylinders and isn't distracted by trying to do ideological brainwashing.
That's the point I'm making.
Your definition "1" describes just about anything. Water, for example, produces a chemical effect. So do amino acids. Your entire metabolism is a chemical process, as is the growth of plants. What I think that people mean when they talk about "chemicals" in their food is artificially synthesized chemicals and that's easy enough to say.
How much does it cost to orchestrate a cyber attack in 2022?