skysight-inc/HackerNews huggingface dataset:
From my experience in C there are two ways libraries deal with not being able to easily pull in their own dependencies. Some of them include their own reimplementations of lots of things (data structures, logging, error handling, date-times). Others decide to keep it simple and only implement a minimal set of functionality which limits their need for dependencies or reinventing the wheel.

Cargo letting libraries easily have their own dependencies means that many Rust libraries are very rich and fully featured. This has plenty of advantages, but the big dependency tree can be a problem in some circumstances. Crate features can sometimes help but usually not much in my experience.

I’ve seen libraries appearing in Rust which are specifically very simple and minimise dependencies (ureq is an example I like). This gives the developer the choice whether they want libraries which just do a small basic job or whether they are okay with including lots of dependencies in exchange for rich functionality. There’s a risk of segmenting the ecosystem (see also async/tokio) but it seems to be working pretty well to me.
Howdy, it's Ronan.

A good few of my friends have had their accounts hacked.

So, I make a point of reviewing all my accounts every quarter.

I've developed detailled checklists and now made them into a product.

Please let me know ideas for improvements on the product!

~

First 10 visitors get 100% discount with code: "ShowHN".
Hi, author here

Good point about the yanking. But yes, there are multiple other problems such as typosquatting and adding malicious code to a patch release. `cargo-crev` and `cargo-vet` are both interesting tools that I'm keeping my eye on.
Hi! I'll give some insight onto why I benefit tremendously from CoPilot

I have a very severe ADHD and as a result terrible memory, I've been working as a dev for almost a decade now and it always was almost entirely in the browser with a search bar, not IDE, and me working with infrastructure doesn't help as I encounter more than one programming language at a time, daily.

CoPilot helps me not making dozens of jr. dev level search queries daily as I can formulate query right in the IDE and it will fill in the basic algo's, data types, language abstractions that I know exist (as I use them all the time), but I don't remember how to actually invoke them, despite doing so just an hour ago. This is the most useful part of copilot, not the complex and very specific code.
I wonder if the mechanism is the same for both covid and the vaccines - perhaps the immune response/inflammation by the body to the common proteins in the vaccine/virus are the cause in both?

On a side note I wonder if Low Dose Naltrexone would help, as LDN is generally considered helpful for "correcting" an overactive immune response.
> I see similar aproaches with Rust code making use of unsafe when there are safe alternatives.

Really? I review and read a bunch of Rust code on a weekly basis from projects I might use in various contexts. I hardly ever see unsafe used, except in contexts where it is necessary like FFI.

I am pretty sure that your comment is provably false, if someone wanted to run a report on crates.io. Oh, looks like someone did, and it trends to 0: https://www.reddit.com/r/rust/comments/g0wu9b/percentage_of_...
I'm all for giving more money to poor people, but how is that related to public transport? "Let's sell for scrap metal what's left of our public transit system and give the proceedings to the poor" would be a mad proposition.

I'm a regular user of public transport. I don't own a car, don't have a drivers license and call taxi/uber maybe once or twice per year. I am lucky enough to live in a place where that's not just possible, but easy, easier than driving a car. And I'm not poor. I can afford a car, just don't want to have one.

Public transport is not a handout to the poor, it is a service which makes life better for everyone. If yours is so bad only poor people would use it - maybe it's time to fix it.
> For example v4l2 has an ioctl to send raw read/write commands to a camera module. Having a datasheet one can then check which registers do what and one can set various features, but this requires using different registers and values for different camera modules.

That touches a nerve. I worked on an embedded system which used one of these camera modules and the datasheet was probably accurate at some point in time during the development of the module, but clearly as the module was developed the data sheet did not keep up. Eventually it was necessary to employ a bus sniffer to capture all traffic between a demonstration kit and module and reproduce the streams byte for byte to get the camera to do what was needed. It was clear from the streams that the demonstration code was using device registers not described in the data sheet.

I suppose that a big customer for the module (such as a cell phone manufacturer) would get access to an engineer who could provide the necessary information, but that was not us.

> ... has been quite difficult on various embedded devices.

Agreed.
I hear you, but...when in the editor, ⇧ ⌘ F12 hides all windows except the active editor. I also added ⌘⇧H as a shortcut.
> they literally invented a new programming language (Go) to address the compile time and runtime limitations of Java.

And then ironically they then use a complex and runtime-heavy Java-based CI/CD to manage the compilation of their Go codebase.

Go is great though, best bit is how its so useable for web-stuff out of the box. Unlike Rust where you have to spend half your life either re-inventing the wheel or choosing which of hundreds of crates you want to use to do stuff that should be part of stdlib.
That's more or less irrelevant, AMD is one of the many fabless companies like Qualcomm or MediaTek. Intel makes it's own chips, and now wants to make chips for other companies as well. They may end up making AMD processors one day.
Value Engineering helps us ship predictably
Of all the criticisms I’ve heard hurled at Java, compile time isn’t one of them. Have you actually used any of these things you comment on?
No, not right now!
Oops, edited my post to remove that extra zero that snuck in.
> Google’s unauthorized digitizing of copyright-protected works, creation of a search functionality, and display of snippets from those works are non-infringing fair uses. The purpose of the copying is highly transformative, the public display of text is limited, and the revelations do not provide a significant market substitute for the protected aspects of the originals.

So is digitizing a copyright vhs and hosting it via torrents also fair use? Its transformative, the public display of the video is limited, there is no market for vhs.

I don't get it whats the difference other than Google having deeper pockets than me?
It's hardly the same thing. A footnote is used for any relevant information that doesn't belong for whatever reason in the body of the text. That it could say "Required" seems neither here nor there.
It's absolutely not last in first out. Sometimes it's a good time to let go of a partner who isn't quite worth their cost anymore.

A good manager is valuable but you'll have some chance to evaluate any future ones. If it ends up being terrible, sometimes you can boomerang back.
At some point it'll have to come home to roost that code is a subset of discrete mathematics first, a literary/artistic work second. There is really no way around it.
Here's a wild thought: only put required fields on your form.

Designing UIs has been part of my job for a while now, and it's always about the bigger picture. Where is this "optional" information being used? If it's optional, does this introduce complexity down the line (handling / not handling it depending on whether it was provided)?

You can always break down and simplify things. Perhaps this optional information is irrelevant -- exclude it altogether. Is it relevant in some contexts only? Handle it separately for these contexts only.

Marking "required" fields is lazy design imo.
What do you mean by “no”? Computers and information theory most definitely rely on logical and axiomatic systems, and particular ones at that.

Mathematics is also shaped by our thinking, which was my point. I think it’s a strong claim that aliens would even have a “mathematics”.
What’s funny is they’ll end up selling it to some IAC-type conglomerate with a huge data brokering business, and far poorer security and privacy practices, but which will escape the eye of lazy regulators who will keep looking to target splashy American brand names to score political points.
AI Koans
This is cool. Congrats.

What are the key benefits of being open source? Worth highlighting on your site?
No and no I think. Flu shots are not based on mRNA. Being vaccinated is also directly correlated with being healthy.
Giphy's primary functionality is pissing off people trying to use Google Image Search to find an actual .gif file only to find nothing but silent videos pretending to be gifs.
Which should be incredibly negligible unless you're counting literal millions of objects. Even then, I'm suspecting that refcounting will never be in the top spots of things that slow you down.
Yes, in early 2020 it was reported pretty often that the unique-for-a-coronavirus spike protein was the part of the virus causing most of the damage. Seems like no one thought twice about injecting us with mass amounts of it for the vaccines...
We'll stop asking for a password, even!

But honestly: If the "remember this session" button is checked as it often is for apps and sites, you should only have to do it every once in a while. Or, if the site is a bit more clever, you may only have to 2FA on sensitive screens, such as "edit personal data" or "make purchase" or "transfer money".

The nice thing about "non-push" TOTP is that it does not require any external service. A site could generate its own TOTP keys, show you a QR code and let you use any app (Authy, 2FAone, Google Authenticator, etc) to manage those codes. And your phone can be offline and still work with it, and you can back up your own 2FA keys.

"Push" based 2FA requires a service, typically paid, like Okta or RSA.
If it went from 100% IFR (original strain) to 80% IFR (Original + Omicron spike) how did it not reduce the severity? Sure it's more severe than Omicron by itself so there were other factors as well, but it does seem like a decrease in severity to me.
> as if we are paying customers is understandable

But I am a paying customer! I've been subscribed to the 'all you can eat' option for several years now.

And as a paying customer, I'm not thrilled about the UI change but I'll get used to it.
It's just as if "running a single container hands-off" and "having 1-n VPS" can be completely different things for different use cases.
> There is a more simple explanation - if China wants a boat to travel from anywhere to Guangzhou, Tianjin or Shanghai then at the moment the boat has to pass close by an island that is a US ally. If China controlled Taiwan, that would no longer be true and they'd have easy access to the Pacific.

No, it would still be true. Just beyond Taiwan on the north side are the furthest islands in the Japanese island chain, and if you instead head south, you see Philippine islands instead. Head through the South China Sea and you end up either having to run past Singapore through the Straits of Malacca (already a critical, congested chokepoint), or travel through the internal waters of Indonesia or the Philippines (admittedly, I'm not sure you could call Singapore, Malaysia, or Indonesia US allies, given the general ASEAN propensity for neutrality).
Angulars new standalone router APIs
(1) The examples he gives of "non-mathematical" concepts are pretty mathematizable. Randomized controlled testing -- mathematics can prove why this is a good idea. Occam's razor - usefulness can be formalized in the machine learning context. Different conceptions of justice, fairness, etc. can be modeled mathematically (at least certain aspects of them can), which helps one understand and distinguish them. (Examples: utilitarianism, equality of outcome versus equality of opportunity.)

(2) The question of "functionally equivalent" is interesting here. If an alien species accurately predicts the trajectory of a complex rocket, many of us would say they must be using math, because we know that our mathematics governs how rockets move. Even if they cannot communicate their method in a way we can understand. Economists sometimes use the phrase "as if", e.g. the alien acts "as if" they have a utility function, regardless of whether that's how they conceptualize their own action. Similarly. they would certainly act "as if" they had math and physics. But the question of whether that would imply they "do", I'm less sure of.
Using any form of fiat currency does the same.
I'll admit I haven't looked recently, but last time I looked, it felt like Jetbrains didn't quite get my use cases for remote development. I don't want to install/manage any infrastructure at all. I just want to connect via ssh to a fresh box and have it work. If that isn't possible, back to the drawing board.
Emad said on Twitter that this funding round completed 8 weeks ago and it was the last few weeks he has been stalling.

For over a month after the funding round completed he was eager to release as much as he could, including 1.5

My read on the issue is that either of (or all) the following is causing some concern:

1. The severe pushback from artists regarding the fact that the model is trained on living artists artworks.

2. Almost every implementation removed the nudity filters.

https://mobile.twitter.com/EMostaque/status/1582055542960230...
I don't know the reasons of this specific group or person, so I'm obviously not speaking for them. When I work on something I like to do it my way. I don't think I or anyone else has the moral obligation to donate their time to existing projects, just because we have similar interests or goals.
What are the major points concerning complexity you have encountered?
This kind of post is unhelpful and unnecessary.

Debugging and using IDEs are entirely orthogonal. DTrace and lldb are far more valuable to me than a graphical step debugger, which I effectively never use. As it happens I use JetBrains IDEs full time.
lol tarski
Yes, but I think America will walk back it's current hawkish defense posture around going head to head with china over Taiwan over the next 10 years.
If they get into a fight, I expect the US to supply arms and money but not soldiers or marines.

This posture change will keep pace broadly with the American domestic chip fab industry.
My take:

Document DB for searching.

SQL for querying.

Or if your life is easier when

42 is a string, use a document DB.

42 is a number, use SQL.

Usually, people want to search, not query, and most information is unstructured.

That's why Google is useful.

Good luck.
If you're interested in usability topics, https://www.nngroup.com/articles/ is a much better source.
Security crises can spur state-building in Latin America
Yeah. And the exception (as a desktop user) - ArchLinux - really proves the rule here. I like Arch for a handful of reasons but the documentation is really the standout one.

But my experience with FreeBSD's docs are even better - and most of that experience is quite old at this point. I can't imagine how much better the situation has gotten since FreeBSD only seems to mature and not degrade (based on comments like yours which are very common).
Ask HN: Examples of Code Reviews
I am looking for examples of good (or not so good) code reviews or guidelines that you might have come across that you have adopted and benefited ( or dropped) likewise.

If you have any specific examples in open source code, that would be wonderful as well.

I'm also interested in opinions regarding readability reviews done at Google.
AI Upscaling Is Not Remastering
Ukraine as a piece of land was Russia's only warmwater port.
I think the argument is mostly that there are universal truths than math and physics describe not that our current level of math and physics are universal truths. So finding an example that we do not understand fully doesn't mean that there aren't truths in other aspects of math and physics. As for things like complex numbers there is an underlying debate that has been around in philosophy of science and math that distinguishes between discovery and invention. Our representation may have been invented but we discovered some thing that works historically and has predictive power.
That isn't a trend line, the crates are sorted by percentage of unsafe code.

From your link: To get this plot I ordered all crates by unsafe code % and then plotted it, so each point on the graph is unsafe code % for a single crate.

The link is still some evidence in support of your position, given that it drops off close to the left edge, i.e., a small number of crates have a large amount of unsafe code. But it isn't nearly the smackdown of GP's position you must think it to be for you to be so aggressive toward them.
It potentially is relevant. If the mortality rate is ~8/1000 and all 46 of those individuals die at half their expected duration it appears to move the life expectancy down by over a year when extrapolated to the general population.
It’s not backpedaling. Both things are true. There are wildly different “intelligences”. Plants, for example. As for highly intelligent, orcas are an example.

And all this relies on some definition of intelligence, which I don’t think we even have a good one for.
That's mostly irrelevant. The naturals starting from 1 are isomorphic to the naturals starting at 0, which is why math didn't need zero for so long.
Yeah everything was perfect back in my day and there's nothing new under the sun. You kids get off my lawn.

I've been coding C/C++ since 1995. I'll take Rust any day, thanks.
Enums are Sum Types, which are a type of ADT[1].
Tuples are a Product Types, which are another type of ADT[2];
Sum Types are so called because when you add one to that, you add just one more possibility (It could be A,B now it can be A,B,C). Product Types, on the other hand, give out possibilities based on their Product, so if you add a new property, you multiply it (A,B can both be two things, so you have 4 possibilities, if you add C that can also be two things, then you now have 8 possibilities).

This is a good explanation: https://jrsinclair.com/articles/2019/algebraic-data-types-wh...

[1]https://en.wikipedia.org/wiki/Tagged_union

[2]https://en.wikipedia.org/wiki/Product_type
The model learns all attributes of the images it's trained on, including that some have a watermark. The fact that it generates a watermark in some images doesn't mean that that is a 1:1 image from the training set, it just means to the model some images seem to have a watermark, so it will add it sometimes. Often you can just add "no watermark" (or add it as a negative prompt with some weights) and re-use the same seed to get the same image without the watermark.
Code on GitHub is "all rights reserved" by default, which means that it is illegal to copy by default. Only by adding a license does it get opened up and made legal to copy - though typically, only if you also include that license when you do so.

So if you trained yourself to only regurgitate github code with wanton abandon and careless disregard for licensing, then yeah, you're liable to violate that default copyright, and certainly going to be violating license rules if you're regurgitating large blocks from memory but not their accompanying licenses.

This is the system that github and Microsoft participate in and willingly and purposely perpetuate. They benefit immensely from copyright law and protection of their code. You can get that they will damned-well avoid letting copilot anywhere near Windows' source, and they would very much enforce their copyright if copilot was spitting that code out for the masses to use.
Firefox 106
You make a good point, the Russkies should schedule a test. If that violates a treaty, well that never seemed to bother them before.
That’s mostly true for any Android phone after a year or two - or sometimes never.

All Android phones have shitty long term support - even the Pixels.

Of course iPhones are a different story with Apple releasing a security update for the 2013 iPhone 5s as recently as June of this year. But I’m not going to suggest an iPhone as an alternative.

On the other hand, developing countries manage with $30 unsubsidized phones and people use them for banking.
If I'm understanding this correctly, ripgrep parses multiple possible configuration files and is still one of the fastest tools I've ever used? That is amazing.
I wonder if Meta just isn't interested in fighting any more because Giphy isn't that valuable to them. Gif mania has ebbed. The court ruling is giving them a pretense to cut their losses and save face.
All those laborers working, enabling greater return to capital, are doing so based on a social contract. One that doesn't send them to the glue factory the second they no longer are capable laborers.
> Every big tech company would think twice before acquiring another company.

I agree with your sentiment, but this seems like a good outcome.
Not pictured: the wall of incomprehensible math code implementing SHA1. Most languages do not provide such implementations by default so I struggle to really call this only 20 lines.
Well, first we could send a series of integers, each being a sequence of pulses, to convey the fact that we are talking about integers. Then express each axiom by a series of concrete examples. And repeat. Intelligent species should be good at recognizing patterns.
I love you Firefox, I tolerate you Mozilla. But I’m not sure a private browsing button, and fall colors really show your commitment to “cyber security month”.
One of the moonshot ideas I'd love to advance in my lifetime is just a real estate investment fund that buys up contaminated properties like said gas station, rehabilitates them slowly using inexpensive methods like bioremediation, and rolls sales of cleaned land into more contaminated properties. The cost to lock up that much capital for that long tied to that much liability would be significant of course, but starting an endowment it would be a huge public benefit that, eventually, could pay for its own operations.
A lot of software uses the video4linux kernel interface directly. That v4l2 compatibility layer is to make those applications go through libcamera even though they think they're using the kernel interface directly.
Maybe its also the exposure to any form of covid dna. There is no end to variance of long covid symptoms, and most of them are simply not reported. Ie my wife is a doctor, and after 3rd covid (which should have been some variant of omicron) she noticed her hair falls out more.

Could be coincidence, but her sister who lives 1000km away got similar (or same due to visits) covid at roughly same time, and has same symptoms. Nobody reports stuff like this unless some researchers go out and actually start asking for this specifically en masse or do some hard statistics like this on whole populations.

But then again, I realize I know next to nothing about this virus in detail, and people like to speculate.
They’re enums that can hold additional data types.

But they’re additionally great because the compiler does exhaustive pattern matching.
Most rapid grocery apps fail to deliver for investors
Same here. 'Remote' development for me isn't about how far away it is, it is about developing across (virtual/container/cloud) 'machine' boundaries.
>you can't write code anymore because some fragment of it violates a copyright

Copyright (unlike patents in general) allows for independent creation. If I sit down to write a quicksort routine, it is going to look extremely similar to a zillion other quicksort routines out there.

The other question (IANAL) is whether writing a quicksort routine is even a creative act at this point.