skysight-inc/HackerNews huggingface dataset:
c helps one understand the limits of what is possible. those limits change over time. without good intuition of those limits, you can’t see the whole solution space that you are creating within, and can’t reason about tradeoffs of different solutions.

also c is fun!
Are you sure those are the same? The book contains two screenplays, an amazon review says it's an early draft but the download doesn't suggest that.

Even if they were 100% identical I'd be willing to bet the kinds of fans that would treasure having the book would still want it on their shelf even if they had a digital copy available.
These aren't really synonyms right? What are they? How are you getting the data?
(I'm basing this on solitutde - alienation example).
Best books I ever read. I would start with The Master and His Emissary by the same author. It’s more accessible.
Its just affecting the Apache Commons Text component.

The title ("CVE-2022-42889: Java Apache Commons vulerability") is overly broad and suggests that somehow the whole Apache Commons project, which consists of over 40 components, has a vulnerability
Yet when we removed tariffs, nearly all local manufacturing was immediately out-competed.

We haven't manufactured cars here since the early 80s when tariffs were dropped, although to be fair, by then it was Japanese companies manufacturing cars here, not Kiwis in particular, our automotive industry is ahem renowned for the Trekka[0], Duzgo[1], and of course, the Bob Semple "Tank"[2].

Likewise, our clothing manufacturing industry has shrunk to a few niche companies that focus on export.

When subsidies and tariffs were removed from the agricultural sector, it forced quite a few farmers into bankruptcy and there were some suicides. It caused very real pain, but it now means that our agricultural industry is strong enough to be competitive in markets where their domestic producer competitors are getting significant assistance from the government.

Our neoliberal phase did a lot of harm, but there was some good.

[0] https://en.wikipedia.org/wiki/Trekka

[1]: https://spiritmagazine.co.nz/2017/04/04/it-duzgo/

[2]: https://en.wikipedia.org/wiki/Bob_Semple_tank
Right with real transaction you could maintain your own index if you really need them.

And to have good performance you should never join entity that have distinct partition key. Otherwise you end up reading too much data over the network.

I’m honestly very happy Cassandra will get real transaction. But i still need to understand the proposed design. Will it be possible to have serializability when doing Range scan query?
FWIW I read it as the latter.
Well, the option he's heading towards is loosing, and I don't think he can change that, only defer it.

The partial mobilization is a band-aid; it won't make the Russian army effective (let alone the air force, or the navy). I suspect these guys are just being thrown in at the deep end. They're doing to die, and not do very much in the process. The main goal is to keep something in the field, so the Ukrainians don't just walk to the border because all the short-term contract troops have gone home.

Building a real army takes at least a year; the Ukrainian are working on this, via mass training programs in European countries, and here in the Ukraine. The guy who organizes my AirBnB is in an infantry training programme; when he picks up the rent, I give him a huge shopping back stuffed with chocolate for his unit.

Then there's the question of equipping and supplying that army. Ukraine has the arsenals of the West behind it, and ultimately the military strength of a country is its economic strength. Putin's underestimation of the power of the West is as great as that power is proving to be.

I've no idea if Russia is also working on property training new units. It seems somewhat questionable - training in Russia is performed by the stay-at-home batallion (each regiment is three batallions, two are normally deployed, one stays at home), but a lot of those stays-at-home batallions have been deployed. If you just throw people in at the deep end, if they do survive, they have experience, but little training. No good for more complex operations, such as offensives.

However, the troops anyway to my eye have no motivation for offensives. Some units are just brutual thugs, killers, torturers and maimers; others are conscripts, and the army as a whole knows perfectly well they were thoroughly lied to and sent into the battle in the worst possible ways, tactically and strategically, and are paying with their lives.

This is why there's so much reliance on artillery; it just sits there, behind your lines, so you can control it, and the men firing the pieces, and all they have to do is put shells in a gun and fire.

I don't think Putin will use a tactical nuclear weapon, because it just won't do very much to the battle; they are surprisingly ineffective on dispersed troops. Even to use one will turn the world against him, and he would have to use a lot. Putin would have to build a new army from scratch, with so much strength it could overwhelm the Ukraine supported by the West, and that is not possible.

I hate being in a situation where I have to even think about whether or a nuclear weapon will be used. Putin has a lot to answer for.
Okay, full disclosure: I’m not entirely sure what the physical reason is, and I don’t have a source beyond just my own experience.

However, I can definitely tell a difference, and it’s not subtle at all. If you play a note on the piano for me while my eyes are closed I can reliably tell whether it’s a black key or a white key. If I’m playing on a (high-quality sampled) synth piano that’s accidentally set to transpose -1 or +1 semitones I notice right away that it sounds like a black key where I played a white key or vice versa. Something about the black keys seems to sound a bit harsher/sharper/tangier to my ears; maybe a slightly sharper attack and/or slightly brighter harmonics in the upper-mid range.

I suppose it’s possible that I’ve just learned to distinguish the pitches — I don’t have perfect pitch, but I’ve been playing piano for quite literally longer than I remember, so maybe my brain just internalized the C major scale, or something. But I’m sure I can hear a difference :)
Why is it called a vulnerability. It’s a feature.
There was an unexpected package update released a couple of days ago, the first in over 2 years https://twitter.com/Y4tacker/status/1580193254665920513
I meant that there are comments or posts which appear and which make accusations that some other communities or people are deliberately biased against Bun. I couldn't remember if they came from the dev lead or from just a user of Bun, but I do recall them being a little bit weird
> If only I had had

I never understood how the English, and sometimes the Dutch, seemed in general (looking at their results) to be able to learn many times faster than amateurs in other territories. Sometimes with borrowed machines! "They gave me this, and after some weeks I had my first videogame working". I guess/ed it may have been a matter of human network - of being able to find knowledgeable people in the neighborhood to learn and exchange -, but it seems to have been often a solitary effort. It seems in a way like a talent, like that of the Scots for inventions, but there have to be keys that made kids talented coders through their own natural grit.

Others have had difficulties in finding documentation alone, not to mention competent peers.
> We’ve found this happens in <1% of suggestions. To ensure every suggestion is unique, Copilot offers a filter to block suggestions >150 characters that match public data. If you’re not already using the filter, I recommend turning it on by visiting the Copilot tab in user settings.

How is that a solution though? OP isn't upset that he's regenerated his own work via Copilot, he's upset that others can unknowingly & without attribution.
CAs don't have to report their certificates to CT logs, and actually there is no reporting in a variety of use cases. However, modern browsers no longer trust certificates for which there is no (cryptographic) evidence of logging to CT.

The net result is that CT gives us visibility into all web certificates (and more).
Same as me. When I take contracts now, the money goes to the military.
Life is too short to deal with that. If your experience with employers is that that toxic, maybe it's time to break out and work for yourself, start your own software business instead.
They are not doing their work, their work is to allow highest available safety standards to be implemented, not to block progress. Their inability to allow curved rear mirrors killed god knows how many US people. You have decades of statistics form ie Europe to back it up, same as for this topic (OK decade and a half for lights).

I suspect its rather a typical lazy government bureaucratic hell case.
Discord Rate Limits Are Ambiguous
… which works well when he's having a conversation with Mark Zuckerberg: https://www.youtube.com/watch?v=0mkR3BkuKCI
I know, this isn't a novel concept. There was a good talk about the spectrum of abstractions and the tradeoffs of template languages vs React's approach at React Europe a couple of years ago (in fact, he goes into that this means there are some optimizations that are simply unavailable to React): https://www.youtube.com/watch?v=mVVNJKv9esE

The question isn't whether DSLs or "just JS" are more powerful, the question is which tradeoffs they represent and which tradeoffs you prefer. It seems that HTMX is primarily based in the Python ecosystem and as a former Pythonista I see the advantage of having a DSL over having to write JS, especially that the former is much narrower, which is what you want in this situation.
Luckily most new cars from the last 5-10 years should have blind spot warnings (even as standard on premium cars) so should be a problem that's at least slowly being solved.
I’ve found that there are oddballs in just about every culture who make new things. Some cultures celebrate them, others don’t. The most tolerant cultures tend to get the most interesting new art.

Edit: corollary, some of the best new art happens in the most restrictive environments. Maybe it’s a case of living at the extremes?
I was curious how a foreign university obtained a .EDU domain, but apparently, foreign universities could register a .EDU domain before 2001.
That's it - ongoing development. You should constantly invest in the development of your SaaS product, unlike the example with the books
> Why do you feel like C is so fundamental that every developer must know it regardless of what they work on?

I never said so. I was answering specifically to "If I want to be a product/creative developer how does learning C specifically help me?"

Since you didn't mention what you do, I was talking about "product" and the definition you have, and if you want to build "product" there is a whole "product" industry, that is bigger than you think, that requires C.

If you do web development you can completely skip it if you want, but C is a nice tool to have around to understand why there is a bottleneck in Redis, Sqlite, a driver or a stack. Maybe find a workaround or a fix, but waiting for someone else to fix it is also valid if you don't want to fiddle with C.

It happens all the time: high level developer points finger and says "there is something wrong with the filesystem, my app crashes". They cross their arms and wait for me to go in a crazy debug session so I can explain them later why their app is slow and/or crashes.
Do you feel that Elaine was misandrist for basically treating men the same way?
What's the point, though? HTMX or any other SGMLish angle-bracket markup template engine is for content creators/authors, not necessarily developers. Sure you can play connect-the-dots and combine technologies picked up from the HN front page, but if you're using heavyweight developer pipelines such as Rust and WASM with service workers anyway, that's already way out of reach for non-developers, and comes with full developer responsibilities for testing, security, maintenance, build systems, versions, dependencies, and whatnot.
I'm not sure what you mean by "sound the same", but just by comparing a simple change from major to minor is quite a dramatic change:

https://www.youtube.com/watch?v=_CTYymbbEL4

https://www.youtube.com/watch?v=10CQAjCrYPY

Same thing with a more recent pop tune:
https://www.youtube.com/watch?v=A9HZH_P_5qM

There's also a reason that in electronic music A minor is used significantly more:
https://www.edmprod.com/beatport-analysis/

It probably has a lot to do with how well that key suits club speakers.
I don't agree that private browsing is for short-term use. You can use a temporary storage for how long it is needed (in my case up until the operating system or the browser crashes, aka almost never).
Many languages other than C have pointers though. It sounds like you are recommending understanding pointers moreso than learning C.

> I've often been given the task to fix severe performance problems in other peoples' code who simply did not know what kinds of operations were costly

What kind of application was this? I completely believe having this knowledge is valuable, but not for all developers.

> This may be hard to explain, but you don't know what you don't know. You won't be able to see an opportunity to exploit your knowledge gained from using C

This comes back to opportunity cost. You are stating this as though C is the only avenue to gain knowledge which can be exploited at a later date. For many developers there is probably other knowledge which is going to be far more useful and exploitable.

Your story about the alternator feels like a good example of this. If I was in your shoes I would have paid the original sum and been happy. You've saved money, but you've also had to learn how an alternator works and replace them multiple times. I'm happy to pay a premium and use that time for other things.
Yes, it's a tradeoff. Picking up a DSL is probably faster and easier than learning an entire new language. But knowledge about that DSL is also not as readily transferrable and it's much harder to hire for someone already familiar with a DSL than one of the most widely used languages. Of course in turn you probably want a much higher level of expertise in that language than would be necessary in a DSL you can learn (and, to some degree, master) in a fraction of the time.
But they still work! (somehow) :)
I would say that "running a process in the cloud" is a little more egregious :) [0].

[0] https://landscape.cncf.io/?project=hosted,member,no
> These lookups are: - "script" - execute expressions using the JVM script execution engine (javax.script) - "dns" - resolve dns records - "url" - load values from urls, including from remote servers Applications using the interpolation defaults in the affected versions may be vulnerable to remote code execution or unintentional contact with remote servers if untrusted configuration values are used

So, if you let untrusted users somehow set configuration, then you're vulnerable.

Never a bad idea to remove an attack surface, but damn, you'd have to plan 3 - 4 sprints ahead to mess up bad enough to let third parties set config files. (And besides, as log4j2 showed us, if you want to allow that, LDAP is how the cool kids do it.)
He called his show the “show about nothing”, and Comedians in Cars Getting Coffee would pretty much also qualify for that title. It’s all 100% fluff. (I love his stuff for exactly that quality)
YAGNI is not an excuse to take lots of shortcuts against known good implementation patterns. Second guessing years of people doing things right by naively assuming you won't need something is more likely to be a mistake than it is not. Do it properly the first time. Actively creating technical debt against your better judgment is silly.
I don't know why it's off-putting that Jerry was always failing at relationships. There's never an insinuation that he's a sexual addict. He just has a ton of first dates because he's a weirdo and so are his friends. It was fairly common for characters in that era of sitcoms to date a stream of new people. The only difference between Jerry and other characters was that the dating was usually a method of creating tension for characters who fans thought SHOULD have been dating. But that type of storytelling requires a sort of earnest humility in the character, and the Jerry Seinfeld character had none to give. Elaine did the exact same sort of thing with men in her relationships.
But this would be very good advice! Exceptions (a.k.a. modern-flavored COMEFROM statements[0]) are extremely confusing and have no place in a clean codebase.

[0] https://en.wikipedia.org/wiki/COMEFROM
I imagine there are lots of conference slides, and internal decks contributing to gvt decisions that are worth preserving. Decisions are rarely made on the back of a 1600 pages report.
Regarding the point about having a relational database:

I was of the same opinion, but recently it has been challenged. We were working on a very simple application and one of the first requirements was:

> User should be able to have a list of skills (e.g., Golang, Java, OOP, etc.). Users can be filtered by list of skills as well (e.g., "give me all the users with the skills "Java" and "OOP" but not ".net")

So, the non-relation model fits perfectly (so, we ended up using MongoDB and the `skill` attribute of "User" is just an array). I know it's possible to use, let's say, MySQL and build a couple of tables to achieve the same, but it just "didn't feel right" (e.g., we cannot filter anymore by querying only one table... and if that requirement is needed, we would need to build a view. But the view needs to be updated regulary, and it just feels like yet another stone in the road of achieving our requirements. The document model, on the other hand, felt just right)
I guarantee you the shrinkage talked about in books from 1930-1993 is not the same shrinkage.

This is obvious if you click through to any of the results from the link you provided above.
I didn't expect such a mess inside :). Especially the wiring in the underside of the chassis.

Oh, and thanks for this blog post. Very interesting.
I experienced a case of zero one many that would have been better if YAGNI was applied.

We were building a messaging system for a system that was being rewritten, where the only requirement was direct messaging between 2 users. It was suggested to generalize it to support multi-user conversations since that was a product desire some time ago.
This complicated the backend implementation significantly, including performance and maintainability. The APIs and the frontend only supported 2 user messaging still.

And the system never needed multiuser chat.
* Having all user-facing strings in a common place.

It doesn't take much effort, but makes it so much easier in the future when you suddenly either need internationalization/translation (both tech side making the switch, but also gathering all the strings to send to some translator), or it's requested that these be managed by a cms of some sort instead of hardcoded all over the place.
Exactly. Same shit he did to Facebook with apps in the past. Suddenly everything should be a Facebook app, the API was nice, the docs ok'ish and the apps appeared to increase daily.

Did anyone actually care about these when the farmville fud was over? What even happened to these 'deep' integrated apps?
> If I publish myself playing that song without the copyright owners permission

Music licensing is bonkers but AFAIR (at least in the UK) I think you're allowed to do covers without explicit permission[1] - you'll have to give the original writers/composers the appropriate share of any money you make.

[1] Which is why you (used to?) get, e.g., supermarkets playing covers of songs rather than the originals because it's cheaper.
I’m going to go with a hard disagree with you on this one. Live comedy is awesome and amazing and you pay willingly to support the comedians and the hosting establishment. Used to go to Punch Line comedy club many years ago and support my friends. The best times we had were never when they were doing their act or practicing their lines. It was when they would riff and go total improv on the audience. Shit would happen and it was wild. TikTok and Instagram videos of small time comedians in packed clubs doing brief bits are a thing, and if you’re not watching them you’re missing out. Paying for comedy is very much still a real event, but sure, it’s probably a niche audience of fans and supporters, always has been, just like the opera or the symphony.
What a coincidence, I was just discussing on discord a similar approach for our Rust web framework submillisecond[0].

Submillisecond uses lunatic to run Rust code compiled to WebAssembly on the backend. We are working on a LiveView-like library now. And one thing I would love to give developers for free is an offline-first experience. You write everything in Rust, compile it to WebAssembly, run it as a regular backend on lunatic, but also allow for moving the whole server into the browser for a offline experience. If SQLite is used for the DB, it could also potentially run in the browser.

This doesn't need to move the whole app into the browser, but could do so just for more latency sensitive workloads that don't fit LiveView well. Like form validation on every keypress, etc.

[0]: https://github.com/lunatic-solutions/submillisecond
It’s easy to imagine problems that are beyond any humans capacity. Obviously the author doesn’t lack imagination, so the purpose must be social.
Yep, I still know all the hex opcodes of the z80 (MSX) now so many years later. It was nice; just type them in basic, poke and go. I never, at that age, knew the assembler equivalents and didn’t know it was a think until many years later. I learnt c and pascal before having an actually z80 assembler. After that I moved on to Amiga where I did learn 68000 instructions to make demos and games.
Europe is not a single country, the EU is not a single country.
> More generally, instead of a boolean flag, e.g. completed, a nullable timestamp of when the state was entered, completed_at, can be much more useful.

In my experience, the timestamps should almost always be entered in addition to the flag.

select * from data_journal
where status = 'Loading'

is much easier to write and understand than

select * from data_journal
where started_loading_at is not null
and finished_loading_at is null
Also those are container formats, not codecs.