skysight-inc/HackerNews huggingface dataset:
> You can't accidentally walk past the end of the array by going one item too far.

AFAIK, that's with a caveat of "unless you modified the array length within the loop" (looking at the gist, "ast" is a deque, so you can pop items from either end); IIRC, that C++ construct evaluates the begin and end only once at the start, instead of every iteration (unlike what you might do with "classic" C++ evaluating "it != ast.end()" every time), so it wouldn't notice the change. This is particularly annoying since C++ developers can be tempted to optimize a classic "for (auto it = ast.begin(); it != ast.end(); ++it)" loop into either the new-style "for (auto it : ast)" or the old-style optimized "auto end = ast.end(); for (auto it = ast.begin(); it != end; ++it)" loop, even though that would break the code if "ast.end()" ever changes within the loop.

(Since the initial discussion is actually about C and C++ versus Rust: in Rust, you wouldn't be able to modify the array within the loop, since the iterator is borrowing it, so this issue would be caught by the compiler.)
If the only thing that's wrong with his statement is where he is, then his statement is correct.
Pretty much everyone uses this mentality with some law.

Ever go 46 MPH in a 45 MPH zone?
Even if that were the case (which we can debate), him being wrong before does not prevent him from being right now. Being de facto banned from the common internet due to centralization is absolutely scary.
Member states are sovereign insofar as the EU institutions only have jurisdiction because the member states allow them to do so. EU law only applies because local law says it applies. The ECJ is the highest court in any of the member countries because the law in those countries say it is.

This differs from the situation in the US where Texas couldn't pass an amendment to their state constitution declaring that they are no longer subject to federal law. State law is subordinate to federal law / the US constitution.
oh, that's a good one. Explaining how brifters work never gets old :-D

On a more serious note, I don't really see the appeal of biking as a social / networking sport. Yeah, we do have a sort of a bike cabal at work too, but if I'd like to network, I guess there are much more efficient ways to do that. Biking as a sport has quite high barriers for entry both in material and in getting fit enough to be able to at least reasonably keep up.
Wow ok I'm guessing you're in the "read this without alarm" camp
America even prior to its founding was built upon covert operations, expecting it to change is pointless; Washington was leader of a spy network [1] and my understanding is even the original federal budget for spying was unusually high.

What’s unclear to me is if it’s possible for a completely open and truthful society to exist at every level. I just find it hard to believe it is, but I have also never seen any proof that it is not either.

[1] https://en.m.wikipedia.org/wiki/Culper_Ring
Other people's poor planning is not your emergency. That doesn't mean you don't go the extra mile to help, necessarily, but it's a favor, not an obligation. Maybe you do, maybe you don't, depends on how you feel about the people involved and whether they deserve the help.

If they don't get that, yeah, leave, will a smile on your face and a song in your heart. The only reward you'll get for staying, if they're not the sort who appreciate the above, is burn-out and more of the same crap in the future.
Has everyone on Hacker News lost their minds?

I come here to read and sometimes participate in rational discussions.

These comments are some of the lowest effort, least rigorous, paranoid bullshit I’ve ever seen on this site. We’re a step above Facebook comments on NPR articles, here.

Partisanship, viciousness and lazy conspiracy theories are not a good look for this site.
Hiding it can make sense as long as you are sure it's eventually found by chance, and the finder will recognize its significance. At some point the building foundation will be torn up, and precisely at that point the hash will be revealed. Any modification before that requires knowledge of it and a somewhat sophisticated plan to modify or destroy it.

But really, you don't have to make those locations secret, you already get a lot of security by requiring an attacker to drive out into a desert to change that tablet, access a building foundation and tamper a Banksy painting. None of these are secure in the cryptographic sense, but even without secrecy that raises the bar for an attack substantially, and makes it more likely to be detected.
Palinode
Hi there,
I know it's a little distasteful to hijack your comment on an unrelated topic but I didn't know any other way to contact you. About 6 months ago, you commented on my post (https://news.ycombinator.com/item?id=30687601) about making an SMS based browser with improvements over coldsauce's Cosmos Browser. I just wanted to let you know that I've basically finished all my major goals with it and released it publicly! (here's that post: https://news.ycombinator.com/item?id=32905496 ). I hope you enjoy it!
You'll still be able to pay for a Netflix account without ads. It will just be more expensive. They're in a very difficult spot, they have rising costs and a diminishing offering so they can't raise prices because most people won't pay more and get less. Hence the introduction of ads to reduce the pain.
You aren't forced to use the MS Store if you buy a Windows PC. You have the choice to use the "safe" store or the web.
I agree. I'm not advocating for doing without. Just replacing
I think most people are aware that the prices need to come down another 50% or more until we're approaching "cheap".
How to raise your seed round – lessons from VC
As someone allergic to those stupid cold calls, this is real disappointing to hear—I hadn't been exposed, presumably because I'm already a customer and have been for years.

As much as I love the product, I'll have to reconsider my usage of Datadog in future projects.
Their billing practices aren’t great either. Non transparent pricing, requiring docusign after signup to change plans, and no refunds for unused services.
Most of the time, 1 gamer = 1 card; for crypto, it's like a dozen guys run hundreds if not thousands of GPUs. It's basically hoarding a finite resource.
Ads? What's that?
> I'm happy to run through some acceleration scenarios if you like.

Yes, please continue! I'm digging your analysis.
Completely agree. And this isn't even controversial. The controversy is about whether to make rewrites, including it in the Linux Kernel and so forth.

But for greenfield projects in systems languages? First of all, that niche is tiny. There may be sub-niches where availability of some specialist library makes it harder to use Rust than C++, but I'd argue that if some library or ecosystem is that important, your project isn't completely green field. An Unreal game isn't a greenfield project even if I start now because the Engine is a massive piece of C++ you have to live with.

For anything this niche of "green field enough", I'd go with Rust even if I had a whole team consisting to 100% of experienced C++ developers. And I wouldn't even sweat the decision.
That's not true. NVIDIA sets a min and max price range you can sell at (both to board partners AND to retail partners). LTT has talked about it at length in the past, including on last week's WAN Show. It was also cited by EVGA last week as one of the reasons they opted to stop selling GPUs.
Why is this being scaled up so much now?

Just chance/gradual progression, or is there currently pressure to make more money?
It's not so clear, in that this fallacy seems to be more accurately what's happening https://en.wikipedia.org/wiki/Tu_quoque
Nowadays it would be a complete waste of time to try to improve MD5, because there is no reason to use it for anything.

Most modern CPUs from Intel, AMD or ARM implement in hardware at least SHA-1 and SHA-256, so these both are faster than MD5 implemented in software.

If you only need 128 bits, you can truncate one of the longer hashes to 128 bits.

SHA-1 is the fastest in the current CPUs, so even if it is also obsolete for applications where there is an adversary who attempts to find collisions, it remains a good choice for various non-cryptographic applications that need a long hash or random numbers.

SHA-1 itself was an attempt to improve on MD5. Even if it was not entirely successful, it remains many orders of magnitude stronger than MD5.

So if you want to know how MD5 can be improved, the best way is to compare the MD5 and the SHA-1 algorithms, and look at what was changed between them.

Another improved MD5 is the RIPEMD-160 algorithm, so comparing RIPEMD-160 with MD5 is another source for seeing how MD5 can be improved, by different methods.
OWASP actually includes this suggestion in their guidance for implementing MFA:

https://cheatsheetseries.owasp.org/cheatsheets/Multifactor_A...

> When a user enters their password, but fails to authenticate using a second factor...:

> ...

> Notify the user of the failed login attempt, and encourage them to change their password if they don't recognize it.

> The notification should include the time, browser and geographic location of the login attempt.

> This should be displayed next time they login, and optionally emailed to them as well
Yes. Most painful thing ever. Inescapable pain.
This is a weird and misleading analogy... Vaccines and nuclear power have been demonstrated to work for decades.

As for web3, what about it works right now? What's the best web3 app?

Do the users meaningfully control their data and migrate it between applications controlled by different companies?

I'm not saying it can't ever work, just that it doesn't make sense to compare it to vaccines and nuclear power.
Not so. Your manage could say, "I don't have hard dollars for you, but I can free up some of your time if you're willing to do some self-training." Or, "I'm told the training budget is zero. What else can I / we do to work on your skills and/or career?"

But a manager that simply says, "No budget. Oh well. Sucks being you." IS failing to fulfill the role of an average manager.
In real terms, where else is the man supposed to seek refuge? Only a handful of nations can manage to resist American influence. Powerful, yet friendly nations, almost always bend to pressure from the US Government.

Edit: I’d also like to add that only a handful of nations have intelligence agencies of their own that are capable of preventing some black ops extraction or assassination. I doubt the government of Ecuador or Switzerland is up to the challenge.

Also Keep in mind that the United States did not ask for permission to raid Bin Laden’s compound in Pakistan, a state with nuclear weapons.
I still use Lazarus/Pascal, not as clumsy or random as pointer math, an elegant language, for a more civilized age.

Wirth was wise to do everything possible to discourage pointer use, and make it obvious. Hejlsberg and company gave Pascal a worthy library and IDE. Then the language florished under the Turbo Pascal, and later Delphi banner.

But then Hejlsberg turned to the dark side, and joined with the MicroSith. They bought forth Sith.NET, Sith# and all other manner of evil.
It's heavily CPU intensive code that needs to perform async operations on rare occasions. Since async adds overhead in every function call, code that calls a lot of functions will be slower.

The problem with the Kotlin implementation is that if you ever want to be able to call a single async function, every call higher in the stack must also be async (unless you have a separate runner, but that's not always possible, and even if it is you can have surprising results)
As someone that often travels across texas. I need a lot more range, but its a unique case. It doesn't help that I also need a van and Fords E-Transit line can barely push 130 miles on a charge when its partially loaded down.

Even looking at long range teslas they don't have enough juice to make it past stretches of chargerless road going from Texas to Colorado to visit friends, even before the losses from having to drive uphill.
Shockingly, Brad Pitt turns out to be a fine sculptor
Exactly. It's a question of incentives. What pain does the management layer feel if developers keep pulling rabbits out of hats to get these badly resourced projects over the line? None whatsoever, only the rewards, so they'll do it again.

Sometimes, to save a piece of wood, the rot needs cutting out. Similarly, to improve an organisation, bad projects must be allowed to fail.
The CIA being a nasty organization that does nasty things has been well-known for decades. What makes (most) Americans tolerate this is the same reason anyone tolerates such nasty things -- they're being done to other people. Drone strikes in particular have been discussed since the Obama administration. It's not okay, but as Snowden himself points out, it is normal.

What did alarm me was Snowden mischaracterizing Biden's Philadelphia speech[1][2] as something out of a Nazi propaganda film by using out-of-context quotes and selective photography. There are plenty of liberals/leftists for whom drone strikes are their biggest issue (often so they can claim that both major parties are basically the same), but this is a step even beyond that. Given that the collapse of American democracy would be worse even for his pet issues, I find it hard to believe that Snowden is being sincere.

[1] https://www.whitehouse.gov/briefing-room/speeches-remarks/20...

[2] https://www.youtube.com/watch?v=NA3Outfs7K8
So much bicycle acronyms and initialisms makes for a challenging read for the uninitiated (like myself)! I've researched the terminology and happily share in hopes you too will find it useful:

1. "lower BB" references a lower bottom-bracket, the part that holds the axle to which the cranks attach.

2. "CX", or cyclo-X is short for cyclocross, which is a style of bicycle race which takes place over varied terrain conditions such as pavement, wooded trails, grass, steep hills and obstacles requiring the rider to quickly dismount, carry the bike while navigating the obstruction and remount.

https://en.wikipedia.org/wiki/Cyclo-cross

https://en.wikipedia.org/wiki/Cyclo-cross_bicycle

The cyclocross bikes appear similar to road racing cycles, the major differences between them being frame geometry, and wider clearances for cx bikes to fit larger tires and generally still function after accumulating large amounts of mud and other debris.

edit: Thank you @jerrycrunch! I've incorporated your bb info.
It's worse. Others include .cxx (fairly common) and .C (thankfully rare).
This $6T in lost wealth is mostly among middle and upper class.

So this clearly would improve inequality in the US. The rich own a bit less wealth so now the Gini coefficient is better - wealth equality has improved!

This is fantastic news! Why isn’t everyone who hates inequality not celebrating?
I heart NewPipe.
You would get taxed twice, but it wouldn't stack. If you earned $15 of Bitcoin, you'd get $15 added onto your tax bill at payout. Then if Bitcoin jumped to $20 and you sold it a couple months later, you'd have the $5 difference of short-term capital gains taxes added on then.
I think the title is a reference to this wonderful song by LCD Soundsystem: https://www.youtube.com/watch?v=-eohHwsplvY
>Also, it's important for everyone in FOSS to charge Apple owners. They're rich and can afford it.

I feel this should be turned into a meme or something.
Though be careful about the use of the phrase "data integrity" -- comparing two files on a file-system by their MD5 hash is probably fine, but comparing the serialization of two PDUs over the wire based on their MD5 hash may be problematic.

I think I understand your meaning to be MD5 certainly still exhibits an avalanche effect; changing a single bit in the input changes about half the bits in the output. And if you trust the way you retrieve the hashed data and the hash (like it's on a local hard drive) then yes, it's certainly acceptable for that use. But collisions and second pre-image generation being faster than brute force are why people generally don't want to use it (MD5) when it's use spans trust domains.

My point is:

a. Don't use MD5 just because Bruce Schneier published a popular book that said it was okay RIGHT BEFORE all the research damning it came out. (Personally... I think Bruce should publish a third edition of this text expressly to remove the bit about MD5 being okay. I cannot tell you how many hours of billable time I've wasted explaining to software engineers that no... MD5 is not recommended for use even though at one time it was considered acceptable. And if you know not to use MD5, you're not the software engineer I'm talking about.)

b. You can use SHA256 and get avalanche, collision resistance AND second pre-image generation resistance. (Pretty sure you also get 1st pre-image generation resistance, but I haven't scanned the literature for that in a while.)

And while I'm thinking about it, let me add these points:

c. There are probably better hashing algorithms than MD5 for use with a hash map/table/tree.

d. If you're interested in how MD5 works, I recommend expanding the scope a bit and study Merkle-Damgård generally. Why MD5 has problems and other hash functions that make use of the Merkle-Damgård construction don't (or have different problems, or the same problems at different amounts of input) is pretty interesting.

And yes, if you happen to have a MD5 hardware accelerator or petabytes of data and MD5 hashes already, it's hard to change that overnight.
My PowerColor Fighter RX6600 works completely fine on Ubuntu 22.04. No stability issues at all, and even ROCm works. The GPU itself supports 5 simultaneous displays but the card has only 4 outputs: 3 DP 1.4a and 1 HDMI 2.1
I think we just ran into each other just recently when I posted "The Seven-Lesson Schoolteacher", but some other guy started talking your ear off and I didn't feel like stepping in to offer my own opinions.

If you look at my response to another sub-commenter, you'll see a few of the things I'd like to add to school, some of which may appear more palatable to you than the abolition of the entire model.

Ultimately, I'm gratified that you're a good teacher, but regrettably not only are you one of the few, you also are kept far back from the actual effect you could be having on kids by confining your expertise to the schooling model. You sound more like a mentor that could clearly steer a high number of kids through life from early to late ages, and you could run events and study plans that go late into the night and through the summer. If you were unconstrained by the rules of the school and unbound by the need for a retirement savings account and health insurance, you could run your own always-open institute where you teach whatever you want to whoever is willing to come and listen. The results you'd see under such a model would wildly outstrip the ones you see in school.

My goal is to create a society filled with people like you--but that takes individuals who are parented well, and it can't be done under the factory schooling model, where the primary lesson learned is obedience to the institution.

The other thing I'd like to point out is that none of the activities you mentioned require school to exist for them to be performed. People visited, played sports and music, and investigated science well before every single child went to school. The difference then was that it didn't "feel real", it "was real". School only provides an age-segregated simulation of greater society, and the more time you spend in greater society the more inaccurate that simulation seems.

Regarding the hyperbole, I don't consider it to be hyperbole. Schools are constructed using the same techniques that prisons are constructed, the social cliques run similar to prisons, and in neither place are you allowed to leave or meaningfully challenge or change the rules of the institution. When you are in a school, you are not part of a thriving society, you are a subject that is managed according to the needs of the administration.
> Absolutely not. In 20 years I've heard the name twice: Once six weeks ago when they emailed me to try to get my team to use their tools (which they failed to describe to me, so I declined), and a second time just now on HN.

I want to second this - today is the second time I heard of them. The first was a job offer on LinkedIn that also failed to describe what Datadog did. It did talk a lot about how it was enterprise scale and important, though.

I declined to look further into it.
I think the answer is pretty dependent on what your personal role is. Are you a PM or tech lead or similar with the political clout to influence things?

If not, and your company asks you to work your ass off for their screwup, leave and never look back. You might be pleasantly surprised at what developer compensation is like these days.

If you are in a position to influence things, it depends how badly off track you and your team are. You need to be able to push back on unrealistic expectations. If you work yourself and your team to the bone and you still won’t achieve what’s being asked, definitely don’t bother. You’ll still have unrealistic and unreachable targets and all you will have achieved is moving the needle on how much you’re expected to work. If you think you might be able to pull off some heroics and save the project with hard work, you need to ask yourself: “Will I personally see any benefit from doing this? Will my team?”. If the answer is no, don’t do any heroics. Your bosses wouldn’t do it for nothing either. They may have KPIs that depend on this that you don’t have. That sucks for them.

You don’t want to set a precedent that you will pull weekends and evenings if you won’t see any benefit from it (think hard even if it has some upside).

What should happen is that the scope should be reduced to something that can be delivered in the original timeframe if possible, and then some milestones should be moved further out (far enough out that it’s deliverable). You don’t want to buy yourself time and then find it’s not enough.
I believe most judgements share some common edges with some fallacious logical forms, and yet retain some validity.
Your argument, for example, has some commonality with what I would call the "fallacy" fallacy, in which one finds an insignificant echo of a fallacy in another's view and dismisses the entirety of what they have to say.
Should be merged with an earlier thread: https://news.ycombinator.com/item?id=32910348
Yeah, chess.com gave that evidence to Hans. He's been mute on that.
How does one go about removing a phone number off of these sales data aggregators?

I don't think I've ever explicitly given these phone numbers to tools like this (e.g. signing up to Datadog with a phone number), so this seems like sensitive PII that must have been leaked and scraped in some shady source that these sales "data-enrichment" tools happily take.
The techniques described in that article are pretty reasonable and shouldn't significantly impact users - swapping name/email fields' names won't do a thing to you. There's also a difference between "this one website doesn't work for me" and "I've been blocked from half the Internet".
> No, the most important reason to choose a VM instead of a reimplementation of the Linux ABI is long tail compatibility. You can’t realistically replicate and then keep up with every corner of the Linux kernel’s interface.

As far as we the public know, Google Cloud Run is based on gVisor, which emulates Linux system calls with userspace code. Seems to work great for the usual container workloads.
Here is a random one: https://www.zillow.com/homedetails/339-County-Road-4315-Napl...

Often the newer ones have large amounts of "waste space" where hallways are larger, entryways are larger, rooms of course are larger.