skysight-inc/HackerNews huggingface dataset:
Maybe familiarity with the languages? Though there probably is room to make this code more readable, without costing too many LOCs.
The definitive list of companies hiring engineers right now
> Make by default uses the file change timestamp to trigger actions. But this is definitely not the only way

Can you point to some documentation for this? I haven't been able to find anything.
That’s the thing though - hooks aren’t JS. They don’t allow for control flow. Hooks are a language that superficially looks like JS. I’m with you on not inventing new languages, and I wish that React didn’t step so far off that path itself…
The broadcasters were always going to get into the game.

The Office was Netflix's single most watched show (https://www.chicagotribune.com/entertainment/tv/ct-mov-netfl...) at the time. They'd rather have kept paying for the content than lose it; "go to one place for most of your stuff" was their key value prop for a long time.
There’s a real lack of education I’ve seen in developers for small projects who go directly to cloudflare for anything and everything. They don’t understand that they are immediately losing a large chunk of their user base who is either from the third world or is privacy literate. Devs working on projects that are targeting those groups need to understand the tradeoffs from using cloudflare.
Most people across the world are a couple paychecks from homelessness. It's nothing special.
Hackers steal $162M from Wintermute crypto market maker
The tone of this reply is a bit shit from a PR perspective.

How about _also_ pointing to a knowledge base article for how an end user could go about working out what network activity from their IP might be flagging Cloudflare’s systems?
We all have a little policeman in our heads.
It's unsportsmanlike to the players in the tournament who are not cheating, especially in most tournaments with top Grandmasters because those are generally round robin tournaments. All those non-cheating players have to play Magnus too.

In the few high level tournaments that are knock out or Swiss system it would be less unsportsmanlike because in those most other players won't have to play Magnus.
I think that little "subscribe to Youtube TV" box might be the most rejected thing in human history.
I empathize with your point of view as far as I am a 30 year old son of a 78 year old father, and I have committed to living close to him (my mother passed 6 years ago) so that he can enjoy as many moments with me as possible before it's his time as well. I'll have the rest of my life without him to go wherever life wants to take me.
I think Snowden is a victim of (naive?) idealism. Idealism often has very short term focus and isn't very strategic. This led him into the trap of realpolitik where the notion of purity isn't a concern. So he saw the US engaging in bad things, in illegal activity --without taking into account how the rest of the world works and how much worse things outside can be. Sometimes whistleblowing can bring change for the good, but it's not a guarantee --in this case, "the powers that be" have too much vested in this organ and will seek to minimize this inconvenient problem he represents.
GeForce RTX 40 Series
If an ordinary user would have to deal with google/CF bs everyday as I do, they'd burn their computer.

PS Proud user of Firefox + resistFingerprinting=true
PPS Ain't nothing better than CF guard page constantly-reloading on 20% of sites if you open some url :( No, fella, you first have to open the root '/' page so that guard page finally can either pass me through or show the cloudflare captcha.
Ugh. Progress, they say.
> What levers might we pull to get other projects to follow suit?

Show that it adds a net-benefit for the cost of investment from as early as possible. You need to embed it into the usual Business Case processes and overall investment frameworks, that are often set and used by government. Then you need to get those early expectations/requirements transferred through to each subsequent phase of the investment cycle and not left on a shelf, which is incredibly difficult given the lack of continuity between project teams. Then you need to make sure it's featured in the commercial agreements for commissioning, operations and maintenance. Oh, and have it defined in terms of benefit value (both monetary and nonmonetary) that is monitored and managed.
Again, it seems to me that they if police are publishing data, they want to make it accessible.

Are police publishing arrests by time and geolocation? Quarterly stats by call or response? Then yes.

Hell, I'm sure if they are publishing coffee consumption numbers, that would go up as well.
Your username contains “googl”, and 9 days ago you commented on a post about Google stock options with an insider perspective. It sounds like you either work, or have previously worked, at Google. I would advise disclosing this if you’re going to write a comment about YouTube ads.
'convey', not 'extract'.

It's a quite different stance. The PM does not 'run' this meeting. That's just a traditional project manager daily status meeting, the inverse of a 'scrum' where the team themselves huddle together and discuss their problems, and what they're going to do next, etc.
I would say the "true" friends are the ones that you would hang out with even if you didn't enjoy it.

I'm not saying there's anything cheap or false about other friendships! The "transaction" is generally something along the lines of "interesting thoughts in exchange for interesting thoughts" or "invitations to cool parties in exchange for being a fun party guest". It's just different from true friendship, where you don't care anymore what the other person has to offer you.
> But boy am I happy (not to mention proud) to be an American.

So said every citizen of all domineering empires in the history of the world before they came crashing down.

Said another way: the best ever time to live in a society is during the early years/decades of the decadence/decline of a large empire.

Enjoy it while it lasts.
>comparing the serialization of two PDUs over the wire based on their MD5

I'm not sure what you mean by this, but this:

>people generally don't want to use it (MD5) when it's use spans trust domains.

is exactly what I mean by "cryptography". I.e. guarding against intentional tampering. Are there a lot of people using it for this purpose? I don't remember seeing one.

>c. There are probably better hashing algorithms than MD5 for use with a hash map/table/tree.

For sure. Cryptographic functions (even obsolete ones) are almost always overkill and too slow for general data structures. Only use them if you can't find something more suitable for your data.

>And yes, if you happen to have a MD5 hardware accelerator or petabytes of data and MD5 hashes already, it's hard to change that overnight.

I was actually talking about SHA-256 acceleration, since I just saw like an hour ago that recent Intel CPUs have it. If your CPU has such instructions, by all means use it instead of software MD5, if all you need is data integrity.
I’m also a developer and tech lead who’s been working with React since the beta. Agreed with all your points about React. I’m not sure I would say Svelte and Solid are a farther step off the “just JavaScript” path than React given JSX though.

I haven’t tried Solid, but Svelte has already paid considerable dividends for our team. Frontend feature development pace is faster, the code is generally leaner, and the developers love working with it.
Wall Street-style trading on US elections inches ahead at CFTC
> We payed $100+ cable subscriptions for decades to watch content that was >30% ads.

I'd rather pay that than know that my streaming provider is paying $100m/yr alone for Friends, a show that ended almost 20 years ago.
Ask HN: S: What advice would you give your younger self?
Okay, so I didn't say a release at first, but I meant to. That's only fair.

Anything built without the -a option to configure.sh is "the program." That's the vast majority. You can try the library too, but there is that one mistake you already know about. I don't think there are any others though.

And again, even with the things you all have found that are in random commits, it doesn't really matter; Rust isn't completely memory safe either. It's close, but not quite.
* some of the then-elected governments

There was a national referendum before the Lisbon treaties that was declined by the Netherlands and France, which in turn "watered down" the EU constitution into the Lisbon treaties which are now in use, which were then ratified without any national votes.

As the German politician Martin Scholz once said, if the EU were to apply for an EU membership, it would get declined because of a lack of a democratic foundation.
Yes, very much agree. The frequent price hikes are pushing it into territory that is just too much to be a throwaway subscription. It's into territory of "is this really a monthly bill we are getting value from?"

If they raise prices again, or God forbid put ads on my sub or require me to hike my price to escape them, I'll definitely cancel and look elsewhere for entertainment. And I have had a sub with them since long before they started streaming (I do miss the nostalgia of the DVDs by mail actually).
Integrating Services in Website Platforms
What kind of reductions would be disallowed?
Go to the dentist
Yeah, if for example Spamhaus (which both Cloudflare and Google consult) has detected that a subnet is bad then that could be the cause.

Still, it doesn't excuse Cloudflare that there's no redress if you are caught on a block or even a clue on what you can do to reduce it (especially that Spamhaus do have redress procedures).
Billing System Under AGPLv3 License
Isn't it usually the other way around in the US? Can't they just send you a bill and then send it to collections if you don't pay? Seems like usually the onus is on the debtor to prove the debt isn't legit not the other way around.
For their next episode Blocked and Reported should do a 3-hour deep dive into some random mean girls gossip at a middle school somewhere.
Testimonials, despite carrying the baggage of being a marketing term, are a legitimate form of evidence, especially if the people giving testimony are named in full. It affects their reputation if either they or the company they are testifying for are disreputable.

It’s true that independent reporting will be more likely to provide a balanced and objective assessment, but at the same time, opinionated articles like the submitted essay are more valuable with the provision of stronger evidence.
I swear substack is just a place to share emotionally manipulative fanfiction after a topic got discussed to death. This is basically all hot takes from the last HN and Reddit threads badly glued together with some whiny wording.
I spent about 2 years at my last job building a greenfield react app mostly by myself (around 10k sloc). I enjoyed it for the most part. But I did run into all the issues raised here, they are valid. I think the worst issue with React is the dependency arrays that get sprinkled around everywhere - in my opinion the framework is unusable without a 3rd party linting tool that points out when your dependency array is missing something. If you accidentally add the wrong value in there, hello infinite render loop!

One of the biggest level ups I had was extracting complex hooks into their own .js files instead of stuffing next to component code. This helps a lot with readability/reusability.

Overall I liked what I came up with, but it felt like a lot of inventing stuff on my own, which I'm not sure if the next developer who comes along will appreciate.
Tangentially related: https://xkcd.com/927/
No comment about the content itself, but the “modern tooling” part made me expect the website would look modern, but it feels a bit stuffy and outdated.
Might be useful to look up the prior research. Search for Merkle-Damgard. And the IACR ePrint archive has quite a few interesting reads: https://eprint.iacr.org/

I get it that you're just hacking around, but reading what the olds said about MD5 is useful.
Perhaps consider Invidious, Piped, or alternative UI.
Pair with Privacy Redirect / libredirect to redirect any hits to youtube to your trusted instance.
Older kernels may not work with newest AMD cards. Some old Debian stable, CentOS and so on. RX 480 is sure bet!
What useful things are on YouTube? I'd miss some conference videos but they're probably hosted elsewhere.
I'd be interested in a Houston meetup!
We're out here
>I need a van

Say no more - I totally understand the situation you're in and a Chevy Bolt EV would obviously not fit your needs.
Thelio's New Look
> both against 'bit rot'

MD5 is good enough if bit rot alone is the only thing you care about. It's still very hard to generate an MD5 collision with the same bit length, and doing so would generally require changing a VERY large number of bits to get a collision, which is not what happens with bit rot.

It might even be mathematically impossible to find two files that have the same MD5 hash and differ by less than a certain amount of bytes, though I don't know the proper way to formalize this.

(It's trivial to show for example that if you use any CRC as a hash, it is impossible to find a collision that differs by an edit distance of 1 and has the same length.)

> but also deliberate tampering.

You're never safe from this if you aren't the guardian of the official hash values. Someone could just change the file AND change the "official" hashes.
> I didn't say that Facebook or Instagram should not ban tiktok. you imagined that I said that.

I'm struggling to even comprehend this sentence. I never said or imagined that you said "Facebook or Instagram should ban TikTok", that doesn't even make sense. I said Apple and Google have no reason to ban TikTok because TikTok does not compete with them. They have nothing to gain except pissing off users, so why would they do it?

I asked "Why should Apple or Google ban TikTok but not Facebook or Instagram". All three are equally guilty of harvesting user data and using it to drive ads and content. You need to explain to me what TikTok is doing that is both different from its competitors, and what makes that illegal.
Book bans–and their changing targets–in the U.S.
I've played around a bit with this, and I was quite impressed by a hobby project.

It's over-all a well designed language. I like the syntax, inspired by Scala (in which the Millfork compiler is written). Semantically, it's approximately equivalent to C. Though some things are a bit more verbose. Function pointers are a bit more limited and you can't pass complex types as parameters (only pointers). The language makes a number of practical concessions to its tiny target platforms. No default stack allocation of local variables, no auto-promotion of u8 to u16 etc.

Since the assembler and higher level language are the same thing in Millfork, it can switch fairly seamlessly between the two. You can specify which registers parameters are passed with in the function declaration, and whether individual functions are in Millfork or assembly, and you can switch between them within the function.

It's also an aggressively whole-program optimizing compiler. I'm not sure I've seen anything else quite like it, certainly not for the 6502 or Z80 processor, anyway. If you want, it will even take your hand-coded 6502 asm { } blocks, optimize those, and then find common sequences they share with compiled code, and factor them out into a common subroutine (if you've selected space rather than speed optimization, anyway).

Crazy to imagine what would have been written if a compiler like this existed in the 80s. (It couldn't have, of course, at least based the memory footprint on my desktop the compiler takes to run with full optimization!)
RTX 4090 available October 12: $1599

RTX 4080 available November: 12 GB at $899, 16GB at $1199
Surprising ways hemp helps the planet
While the shortages are real I've bought GPUs during those years, never for even 2x MSRP (though obviously more than MSRP). Prices have also surely increased due to gamers at times (even if less so) without me hating them, and MSRP has clearly been set quite low compared to costs and the past - look at EVGA barely managing to profit by selling at the prices set by NVIDIA which would hardly be due to the increased demand.

At any rate, I'm just not convinced that the extra demand for years isn't good for the GPU industry - e.g. I'd imagine 10 years down the line the GPU industry to be better off in the world in which it had increased demand for years over the world where it didn't. Hell, maybe it even directly helped with scaling up for the increasing ML demand.
Couldn't you use e.g. the DSGVO/GDPR in the EU to get all the information about your IP, everything cloudflare has stored about it until you find the root cause?
Your ability to deduct business expenses using Schedule C has nothing to do with the standard deduction. (And if you don't treat it as a business expense, you probably can't deduct it no matter what.)
> This one's a little user hostile to folks who use assistive devices like screen readers.

As long as you're using a <label> or aria-label attribute, that shouldn't be an issue.
I hope not. But lots of legacy systems that need maintenance and the occasional new feature?
On the investments, isn't that double counting? The people buying the products/services are counted once, then the owners of the factory (etc.) are counted for the same energy a second time?
What are you doing now? Did you shut the project down entirely?
You said, "And the suggestions really only impact malicious actors accessing your website from a script." and that was false. Since you didn't have experience being blocked you couldn't know. Not till it happens to you. I don't think pointing this out is a personal attack. It's just the way people work. People don't believe things are a problem until they become a problem for them.

You and others can keep quoting the legit and clever ways to mitigate bot spam but if you ignore the false positives the other checks create it kind of defeats the point.
This exactly. Unless you're using a suite that's specifically built for crypto traders, there's no way the software can know that income on day X (which you pay income tax on) is from the same bucket that an asset as was sold later on day Y.

You have to tell the software about your cost basis, which is only a problem if you're mining. It's smart enough to figure out buying and selling on the same platform, but it is not smart enough to figure out that some income was related to later sales and track your cost basis unless you make those connections yourself.
Where 'policeman' is a metaphor for justice and predictability. That in and of itself is not a bad thing to want.
Anything built without the -a option to configure.sh. You can try the library too, but I did mess up that one time that you already know about.
I think it's fair to assume 3mi/kWh as far as that's the realistic efficiency in winter time with the heat on.

That's the information people new to EVs need to know - the fact that efficiency goes up when conditions are better is gravy.
No HTTPS, in 2022?
The most concerning thing for me is how the CIA and other branches of our intelligence agencies avoid oversight by funneling work through foundations like https://en.wikipedia.org/wiki/National_Endowment_for_Democra... and https://en.wikipedia.org/wiki/National_Democratic_Institute and https://en.wikipedia.org/wiki/International_Republican_Insti... etc.

If we have no accountability for our intel agencies then what do we really have?
If "extract" is too triggering, you can replace it with "glean." Probably a bad word choice on my part.
Top-vs-Code-Extensions-for-Developers
Scholars ask Congress to scrap winner-take-all system
Re: Volvo's good deed -- In contrast, Edward Land (the Polaroid camera guy) came up with a system for polarizing car headlights and windshields to lessen glare from oncoming headlights in 1948. Apparently, none of the car manufacturers implemented it because there was nothing to gain financially from such a safety feature.
https://www.polarization.com/land/land.html
> I sincerely hope they won’t start adding ads to paid tier

I would instantly cancel my subscription at the first sight of an advert, and I'm pretty sure that Google understands that most people would.
What React does is no longer novel. People have both cloned React and have made other libraries/frameworks that accomplish the same thing differently or even faster in some cases.

Frontend craft has also become too complex in general. We really need to step back and decide whether all this fucking shit around SPA, SSR, route splitting, transpiling, everything-as-a-type, "me too" features between frameworks, overemphasis on trendy designs, package managers that wrap around other package managers, REST or GraphQL or RPC, etc. etc. etc. Much of which serves mostly to create corporate careers for developers more than to actually serve users.

React takes us forward in the sense that most of us don't want to go back to direct DOM manipulation or jQuery, and it's simple enough that it doesn't come with the same baggage as Vue, Angular, Ember, and so on. Even if React itself were to fade, the institution that is React I think will continue on for the foreseeable future.
Yes. I am your age and feel similarly about YouTube. However, I teach young people and they have zero boundaries with technology. Worse is that their cognition has evolved with technology such as YouTube, at its core. Turning off YT would be like turning off a section of their brains.
If you believe successful startup founders "won the lottery" (I don't), at least it's an accomplishment that required building and managing a productive enterprise. Lottery winners rolled the dice. Very different skillsets.
Appealing to Dunbar's number for org sizes is a strong signal for me I should de-weight whatever the person is saying. They're just parroting pop-science with reasoning that doesn't hold up to a second of critical thinking.

If humans evolved to hold about 150 relationships in our minds, to say that an org has a tipping point of 150 people assumes the members of the organization know 0 people outside of the organization. Maybe this is approximately true for Amish communities. It is not close to true for startups doubling in size every year. The available "relationship slots" for your company is probably more like 10-25.

If you want to say "things get weird at about 150+", sure, maybe that's true. But no need to bring up theories that extrapolate primate cranial capacity.
Context is useful for certain cases, but plain old useState/useReducers are the workhorses. I think the beta docs are pretty good about explaining the tradeoffs (https://beta.reactjs.org/learn/passing-data-deeply-with-cont...).

To me one of the biggest issue is that almost everyone is deeply afraid of prop drilling. Passing props around and having some local state works very well for large parts of many applications. With hooks we don't have deeply nested Higher-Order components anymore, if you pay a bit of attention you can have reasonably shallow component hierarchies and props work very nicely then.

Server-side state is a special case, I find that much easier to handle with something like React Query. But once that is done I don't see much need for any external state management library like Redux, useState/useReducer works pretty well.

And yes, sometimes Context is useful for state that doesn't change much. But those are the cases where the drawbacks don't matter. But that is a special case, not necessary for the vast majority of state.
If you don't want to use modern Java libraries as third party depedencies then all good.

Now if you plan to dynamically link to Java libraries that require JVM opcodes without counterparts on DEX, SIMD, Panama, Java Standard Library post Java 11, then thought luck.

See it as an opportunity to learn how to use the NDK (for SIMD), or write your own Kotlin versions.