skysight-inc/HackerNews huggingface dataset:
I don't know, I currently write both C and JS on a daily basis, and I just can't see how Go is anything like JS. For me, Go is definitely in the C syntax family, while trying to solve roughly the same problems where Java has been used extensively (backend services).
My post is about Minecoin and Minecraft Marketplace, not the community of modders outside of that who may or may not be exploring their own forms of monetization.

Nothing stops the hypothetical crypto/rollup-based game I mentioned from the same situation: an official crypto based UGC marketplace, and unofficial community modding market that uses whatever payment and revenue mechanism those users prefer (a mix of free/OSS, PayPal, Stripe, and maybe even crypto as well).

PS: It may be worth noting that it is against the EULA to sell mods/skins/merch that infringes on Minecraft IP outside of the official Minecraft Marketplace.
Rural areas don't normally get plowed. Can you imagine the expense of plowing all of USAs rural roads. An alternative is a little swerve that requires slowing down.
Congratulations on the launch! Quick question - How is this different from Terra?
> No better or worse than trying to signal with.....

"Signalling" ?

Part of me has just died. Have you ever thought about not giving a toss what others think and just reading?
Japanese have a word for unread stacks: https://en.wikipedia.org/wiki/Tsundoku
> there’s very likely a net economic/social gain.

I see your point, but I strongly disagree. Providing a suicidal person with the right resources to help them avoid suicide will (imo) yield a net gain over the rest of that persons life, as opposed to the gain from selling a gun and a bullet and giving him a quick out.

One example that comes to might right away is Alan Turing. Whose contributions to modern society can hardly be overstated. And I know he didn't use a gun, I'm making a point about helping people out of depression, to oppose your opinion about it being beneficial to let them kill themselves.
Very interesting indeed. Maybe FB did end up doing some of his by copying Stores, now Reels.
Muntzing: The art of reducing components to the minimum
I work at Microsoft and I can confirm this.
We get that Zig doesn't have memory safe features. How much of a big deal is that anyway - what proportion of issues are caused by memory safety errors? And as an aside - how many Rust codebases use unsafe code?

(I don't know the answers to these - I'm a humble C programmer who intends to look at Zig soon).
Interesting. The reason for a bug seems to be that ^ and $ in regexps match a boundary of any line, not boundaries of a string. This have already caused problems in the past, as far as I remember, but Ruby developers didn't change the behaviour of these characters.

So if you write a regexp like /^[0-9]$/, a string "Any characters\n12345\nAny characters" will match the regexp.
A GADDAG[1] is a combination pre-/suffix trie that's used for move generation in Scrabble. Unlike a traditional dictionary to find anagrams for words, a GADDAG makes it easier to identify plays based off of available letters already on the board. I made a little visualization of how they work for a data visualization class a few years back.[2]

[1] https://en.wikipedia.org/wiki/GADDAG
[2] https://www.axioms.me/gaddag/#?page-5
I was going to mention it too! The really cool thing about reservoir sampling is that it can be done "online" (ie process input incrementally) which makes it super useful when you want to compute statistical properties of something in the field without blowing up your cpu and memory.

For example, let's say I have a server serving queries. I want to measure min/max/avg/stdev/99p you name it. You can do it cheaply with reservoir sampling, without having to save all data points.
speaking of agencies and horrors !
I too did a 6 months stint at a "digital agency". To be fair I still think they were one of the better ones. But it was just not for me:

1) EXCESSIVE Timekeeping (I had to log every hour basically I was at work, felt like an inmate). Sure that is there business I get it. But it's not for me.

2) Many projects(Same-Same): I also learn that for my personality (and sanity) i work better if I can focus on one or two long term projects.
Doing 5 little projects different days of the week, was horrible. To rephrase, dealing with 5 different clients a week was horrible, 7/10 times you basically just undid half the work you did previous week. Since you know, "requirements change" or it took them two weeks to let me know "oh it has to work like this not that, I thought you will know this" type convos.

Anywhoo programming can be wonderful or it can be awful !
Newer versions of tzinfo use non-ruby files for their data and are not effected afaict.

My guess is that it might be exploitable when parsing a user provided datetime with zone without any sanitization of the input. And only when using that get method. I might try to see if Rails is vunerable to this, but probably not from a cursory glance
What I like about HAMTs is that they can be super simple to implement if you make them one bit per level. They are like a combination of a binary search tree and hash table but without any of their annoyances.

* In binary search trees, you need to balance the tree every time you insert something because the tree will be linear if you insert the nodes in order. In a HAMT the positions are determined by the hash, so the positions will be random-like and not depend on the order you insert the nodes in.

* In binary search trees, you need to perform some complicated steps to remove a node. In a HAMT, you can either just mark the node as deleted, or if you want to fill the gap, find a leaf node that has the removed node on its path and just put it there.

* In hash tables, when it starts to get full you need to rehash it or put the added item in the "wrong" slot or something. A HAMT never gets full because it's a tree so you just add another child node.

Here I have written an explanation of a simple HAMT: https://www.robalni.org/posts/20220507-a-hash-table-you-dont...
thanks for the heads up! Hopefully Marcus Filly isn't a Scientologist because they both sometimes do workouts together. I really like Fillys programming but ... if so, no money goes towards Scientology.
Both parties in the two party system have primaries to choose party candidates. If people don't participate in primaries, they shouldn't be surprised when neither party pays attention to who they want. Anyone can run in primaries and they don't even have to win. The whole primary process is designed to signal to the party and the winning candidate what voters are willing to show up for.

"Nobody votes for who they want in office" is a natural result of high political polarization and the inherent polarization in any democracy, when that many voters hold competing and conflicting priorities then of course practically no one gets what they want. Spinning this as some kind of evidence that American democracy is broken makes no sense when this is said about practically every democracy, including democracies that use ranked choice. Ranked choice or any other voting system is not going to change this dynamic where the will of millions of disagreeable voters are condensed into a relatively small committee. Alternative voting systems are a trade-off like any other and at best will just move the needle a bit on a handful of issues. Voter suppression is yet another exaggerated bogeyman, it's largely a fight between two equally well-funded factions and the votes it accounts for pales in comparison to voluntary abstinence.

Of course the problems go beyond which particular asses sit in Capitol Hill, it goes right up to the asses that sit in the United States, including the people who promote the distracting fable that the system citizens repeatedly voted for (directly or not) is the fault of other people.
The first time round wasn't the main thing that NZ basically shut itself off from the world? I was generally supportive of the sort of measures much of the world implemented restrict the spread of covid (widespread testing, masks, vaccinations, encouraging WFH, etc) however to me both NZ and China's approaches didn't seem feasible for most of the world.

So if I understand correctly NZ had a short hard lockdown to reduce cases to zero and then maintained it by severely restricting and controlling arrivals from abroad. I live in a Central European country that simply cannot seal itself off from the world like NZ did, we have open borders within the EU via Schengen (a good thing IMO) but there's very little chance of every country in the Schengen area agreeing to follow this model. This means virus carriers would inevitably enter the country, cause an outbreak of cases, necessitating repeated lockdowns and the public would quickly rebel against the measures.
Gamer's Nexus also did multiple videos with the Intel people. And LTT also burn bridges.
The compilers for VMS have to deal with a bunch of platform idiosyncrasies, such as the ability to have a mix of 32-bit and 64-bit pointers in the one program.
I wonder the same thing. The article has the section: "How Hertz Could Have Done Things Differently". I think the obvious answer is: Hire an in-house development team that has some sense of responsibility and attachment to the company.

If you're Hertz, your website is central to what you do, it's how most people will rent a car. It's something you should do in-house.
Not really a pure data structure, but I like hash tables where the entries expire after some time.
This is very useful in interactive situations like in games or chat bots, where for example you want the AI/bot to remember a conversation or piece of information for some time.

Simplest to implement is to just wrap a hash table and insert time checks in the accessors.
Biggest problem for any non big-city to big-city transit are the last few miles. In the end my options are often to use a taxi or get a rental car. In both cases the price needs to be added to the cost of public transit making my personal car cheaper, more convenient and often also faster. It's a tough nut to crack. And I'm saying that as a German with one of the best public transport systems in the world.
What is the point of importing a dataset of this complexity if you can't also work with the data inside the DCC?

Try the thousands of tools and plugins available for Blender with such data and see what happens. Good luck.

I guess my point is: you need to also "fix" any of those that crash/hang/are too slow to make this worthwhile.

Just to be clear again: awesome they fixed the bugs that lead to crashes with this data.
Not sure if that large a dataset was required at all to do that though.

But the speed improvements? Do they matter for your average OBJ?
And if no one ever imports data of the complexity of the Moana dataset, because they can't work with it afterwards anyway, any speed improvement that is not felt in the average use case is a nice engineering exercise, foremost.

There is a reason why most commercial DCCs, too, struggle with data sets of this size and no one has ever "fixed" this. ;)
I have no idea why people do this to themselves

https://nitter.net/mcfunley/status/1550219636464967680 is making it easier but I'm like this is 100% an article that could feature in any tech magazine or blog.
interesting, found a couple more
- https://www.jasminedirectory.com/
- http://www.stpt.com/directory/
- http://vlib.org/

seems like it never really took off, too hard to maintain i guess.
> Do any Ruby devs have an idea about how widely exploitable this vulnerability is? The GitHub issue mentions that a file upload could trigger this.

The file upload itself is only part of the exploit.

If we assume the exploit as "executing code that is written by the attacker"¹, then the requirements are:

1. ability to upload an arbitrary file to a filesystem accessible by the host

2. ability, for the attacker, to pass values that are ultimately sent to `TZInfo::Timezone.get()`

With those conditions in place, the attacker will attempt to figure out where the file is located (with multiple attempts or so), then make `Timezone.get()` load the file.

It's not clear to me if `Timezone.get()` is indirectly invoked by some common Rails API, or if this is an API that is commonly invoked by the user.

As a starting point, one should check if they're invoking such API in their app.

EDIT: at a brief check, ActiveSupport exposes a `TimeZone` wrapper, that invokes `TZInfo::Timezone`, and can be used for the exploit.

EDIT2: It seems that the instatiation is not user-initiated (I suppose it's automatic... and not obvious to track), so unless the app devs intentionally perform this instantiation, I think they won't trigger custom calls (but I don't want to give false assurances).

EDIT3: I wonder if this can be triggered by putting certain data in the database and triggering loading. I can't exclude this vector because... Rails is complicated :). Seems overly complex, though. I think Rails intimate knowledge is necessary in order assess with very high certainty which the possible attack vectors are.

[¹] I'm making this distinction because if point 2 applies, but not point 1, the attacker can still execute arbitrary files preexisting in the filesystem.
my 2 cents:

Deduction: p( C | do(P,R) )

Induction: p( C | do(P), R )

Abduction: p( P | do(C), R )

where C stands for conclusion, P for premises, R for prior assumptions / remaining possible statements in the universe of discourse not covered by the premises and conclusion.

Deduction can only take values in {0,1}. Deductive arguments are valid when that probability is 1, invalid when that probability is 0, sound when do(P,R) can be shown to be 1, and unsound when it cannot. Typically when trying to show that do(P,R)=1, we may assume or try to show that it can be simplified to do(P). Whether it can or not is often the source of soundness errors.

Inductive arguments are effectively probabilistic reasoning about the posterior probability of the conclusion (i.e. a process equivalent to Bayesian inference, with regard to statements in the universe of discourse and their probability).

Abductive arguments are statements of [high] likelihood, with the intent of exploring/generating/identifying [high-likelihood] data (i.e. useful premises). It can be compared to Maximum Likelihood Estimation in statistics. Quite often, R is simplified to be null (i.e., the universe of discourse is limited to only what we already know). The intent is typically to generate a subset of premises to act as a new, more manageable universe of discourse for subsequent deductive or inductive reasoning, when the original full universe of discourse would be intractable.
Yeah, either that or you implement your own. Doing so with reference counts might not be too hard, though.
It's not at all guaranteed that increase in sales was due to the redesign.

But yeah considering that revenues have only gone up, might as well just call it a cost of doing business. Learn from it and move on. (It sounds like this is exactly what he's doing.)
Cupscale supports multiple models tuned for different types of content (including Anime like waifu2x): https://upscale.wiki/wiki/Model_Database
Have you considered just...contacting their support team? It's Linus Media Group, not Versace. They pride themselves on good customer service
Can you share any compiler benchmarks showing Rust compiles slower than C++?

I can see something totally opposite in my projects - particularly recompiling after a change is very quick. And cargo check often runs in less than 1s. I never got such quick incremental recompile times in any of my earlier C++ projects, particularly when using templated or header heavy libraries like STL ;)

As for the borrow checker thing, it is not broken but it's simply a limitation. In a strictly statically checked it is usually possible to run into a situation of a valid program that gets rejected by the compiler. Here this limitation comes from the compiler following a pretty simple rule - only one reference is allowed if it is mutable. This simple rule is what makes many of Rust safety guarantees possible, and I guess relaxing it conditionally might be very tricky. NLLs have already made it a bit nicer recently, do maybe it is possible to improve it further.
To be fair, I think they are changing that or the focus on quality. Looking at their recent videos it looks like they constantly on the hunt for better manufacturers and even do their own testing like color-bleads washing.
Most traditional approaches to voice isolation are essentially a combination of EQ and filtering, it's interesting to see an AI-based approach to the problem.
Yeah, there's definitely positives to the algorithmic / personalized approach. He mentions it in the thread, even: they were feeling pressure because there was only one homepage with ~15 slots, and getting on it was a big deal, but only a tiny fraction of sellers could get lucky. You either got super lucky and got a huge sales boost, or nothing, no middle ground.

Compare that to, the other day I uploaded my first TikTok about some obscure bit of Lord of the Rings appendices minutiae[1] and got 1500 views. Not going to be the next John Green here, but it felt cool to just try something on a whim and have some success. The algorithm spread that viewership out and made things more "equal", I guess. Plus, it made the "niche lord of the rings content" genre possible, since it wouldn't merit 1/15th of all TikTok viewership in the "TikTok has a fixed Etsy-style FYP with 15 videos" alternate universe. I wonder what the most popular 15 videos on TikTok are right now...

That's all to say, you should write that book (or essay!), I'd read it :-)

[1] Middle-third-age Gondor looks a lot like a mirrored Tang dynasty China, and has other similarities
Eh?

One buys sports cars and wine for enjoyment. The idea of buying the most expensive offering for its own sake is laughable.

One doesn't order an expensive claret to drink with fish!
Interesting read, thanks. I also see the Netherlands (and Denmark) as much less car centric and like what I see, including the effort the change the car dominance in the cities.

btw: I just picked the car crash fatalities (per million) and it is indeed better in Netherlands: 35 vs 38.5. The numbers for Netherlands seemed a bit high to me at first, but very likely it is not that easy to compare these numbers and one has to consider other things like the population density, which is only 232/km² vs 423/km² in Netherlands.
... and making it work for 50 different laptop models, all in slightly different ways and with slightly different software is a lot of work. Plus it just doesn't work over the internet.

Add to that that without chromeOS you've essentially got one choice: windows. So you'll be finding out all about spyware that rootkits the OS, and constant amazement at just how many different rootkits kids can get installed on a single machine. Hell, when I was in school, I wrote a custom rootkit (bo2k like) and installed it on machines. That was fun and instructive.

(I know technically you can make it work over the internet but it takes very capable admins to make that work)

And yes, I hacked the school, but that was through unsecured shared folders and seeing a teacher enter people's grades in excel, not through the rootkit. That I was caught doing (because I decided to "expose" the school by giving a friend's sister her grades 2 weeks in advance, and their parents went to management. I was in detention "for the rest of the year" and I was lucky that 2 teachers demanded I would be allowed to sit my exams because I was the best in their classes)
I felt like the author’s choice to quote that specific part of whatever she wrote was a pretty harsh choice. As a reader you see that and jump to the exact conclusions you’re alluding to here.
>What evidence is there that the attrition we see from car accidents is actually a net-loss for society?

What does "attrition" mean? People killed in car crashes? How could that not be a net loss? Your second sentence says "furthermore" to introduce the idea of the cost of safety measures, so that seems to imply the first sentence isn't considering the cost of safety measures.
So like a std::deque? If the block size varies then lookup will be O(log B) where B is the number of blocks.
>Basically all tech reviewers, LTT included, are garbage because of this arrangement.

YMMV. But I won't say it's garbage. I do get value out of this and similar "reviews"
Might not be very obscure but it was new to me. Ended up being really useful for finding out whether dates intersect a particular period and ended up using it quite a bit at work.

Range Tree:

https://en.wikipedia.org/wiki/Range_tree

You give it a range of dates and it'll tell you if any intersect so if you're looking for "how many people are absent in this time period" you can really quickly find out by using a range tree.
I worked voluntarily to a region (Kreis) in Germany in the first lockdown. I was asked to help to come up with a solution an evaluate different players. I have no horse in this race and I wanted genuinely help. My kids would profit from that, but other than that, was pure voluntary work. The GSuite was the only one that:

a) could scale

b) multicultural and multilanguage

c) great usability in all exotic different setup of OS

d) well thought workflows

d) low learning curve

e) affordable price

However we decided to don't go with that. There are someone from the "Die Linke" which was repeating this FUD about "The privacy of our kids are at risk".. Here is why I think that is wrong:

a) You could anonymize all the users. The Felix Müller could be just the X1234 in the platform and the teacher would track his homework and deliverables without revealing his identity.

b) From Risk analysis the risk of the NSA knowing that the school kid Felix Müller had a 4 in Mathematics, is IMO acceptable if you think about all other positive aspects of the tool.

In the end, each state in Germany decided to come with their own solution mostly developed in house, and almost all failed miserably. Couldn't scale, couldn't support different browsers and OSs, all workflows were not well thought. It was so bad that many schools just kept with paper, making the lives of everyone involved a nightmare.

I'm 100% sure that one of the main reasons for the bad digitization in the schools in Germany was caused by this pamphleteering and I would love to know who really got the contracts to develop the "Home Schooling" solutions used after that.

References:

https://www.dw.com/en/oecd-german-schools-falling-behind-in-...

https://www.dw.com/en/germany-and-digitalization-why-cant-eu...
The general answer is that linear integer programming is NP-complete.

The more specific answer is that you can abuse integer variables to do Boolean logic and then eg model piece-wise linear functions relatively easily.

In practice, this abuse might or might not be very performant, it depends on exactly what you are doing and what your solving is doing. It might be fine, or you might be better off with quadratic or complex programming solvers.

If you have a more specific example, I can try to model it.
At my previous company we were all in on Google Cloud, mostly for technical reasons as we felt it worked better for us than AWS.

When it came to whitelabelling our product for a big multinational customer, they really liked that we were hosted on GCP and not AWS because they considered Amazon a competitor and couldn't justify paying AWS as a result.

Privacy concerns aside (which I believe are overblown for GCP, strong walls around customer workloads), competition concerns are big for many companies, and Amazon is out there trying to compete with almost everyone in retail and services now. I can only imagine this is going to get worse.

Disclaimer, I now work at Google but not on any of this stuff, this is my personal opinion.
There are only so many cows.