skysight-inc/HackerNews huggingface dataset:
I think the solution can be quite simple: allow the user to configure secure channels between apps, sidestepping the main clipboard altogether. So that if e.g. a password manager is configured as source, and the browser as destination, have an option in the password manager to send a password directly to the browser. There would be no intermediary storage like the traditional clipboard, and no typing with a virtual keyboard, just apps communicating directly via a secure mechanism provided by the OS, and configured by the user.

This is already possible by using named pipes on Linux[1], but it has to be built specifically for each app, and anything can go wrong with the implementation. It seems like it would be relatively simple to have this functionality built into the OS.

[1]: https://news.ycombinator.com/item?id=33329561
Yes, the United States has a you-can-recieve-anything philosophy (with some limits for old analog cellphone frequencies, and restrictions on using, e.g. a police scanner in a car) that isn't matched in many other countries, which is the legal basis of how Ireland and the U.K. require you to buy a license to watch over-the-air television.
Nice, Python 3.11: Python for TaskGroups
When did cops say they don’t “go after” theft? I believe they don’t prioritize investigating it, but they can’t refuse to take a report
How the U.K. Became One of the Poorest Countries in Western Europe
Screw these people. Low ethics, theft raises prices over time.

Although these self checkout machines reduce low skill employment opportunities, I think helped by reducing prices to a small degree
.. at least until people began to feel entitled to steal
What are you running? I've done multiple large deployment for machine learning work and they all work fine, stuff like numpy, scipy, pandas, pytorch etc which are the primary technologies I've seen written in C++. I wouldn't expect normal libraries to be so however, since they're likely not speed critical; Django for example I'm pretty sure is just Python.
That’s really not what’s going on here.

All the previous gen bundlers are written in JS and support a giant ecosystem of JS plugins. There’s no incremental way to migrate those projects to Rust. The benefit of these new bundlers is that they are literally full rewrites in a faster language without the cruft of a now mostly unnecessary plugin API.

And the “cost” of this? Some of these new bundlers are written by just 1 or 2 core contributors. Turns out with the benefit of hindsight you can make a much better implementation from scratch with far less resources than before.
Interesting idea. I'll have to try this.
Instead use the ARIA tag role="presentation": https://developer.mozilla.org/en-US/docs/Web/Accessibility/A... to indicate when an element has no semantic meaning and is purely visual.
Oh yeah, no and low-code is going to put all of us programmers out of work any day now.
OAuth flow is even worse, if you find someone's browser open and click the link, it will complete as long as they are currently logged into GitHub/Gmail/whatever provider. I am not claiming that key management is easy or foolproof, but when this is what we're comparing to...

And again, you don't have to use web-of-trust. It is there, which is an advantage. If you don't/can't use that, you can find a PGP fingerprint on a random HTTPS page, which will be just as easy to copy-paste as the list of email addresses you showed me a couple posts up... with the advantage that I can use them for verification directly, rather than involving third-party authorities.
Two thoughts immediately jump out to me:

1. As much proprietary stuff as we still have to deal with, we've really come a long way.

2. The approach that our parents took of working at one company for many years (or a whole career) (and retiring with a pension) really disappeared quickly.
Required Pission impissible category for the more accelerated and hardest films.
> we are past peak safety of aeroplanes

I'd bet against that. Deaths per passenger mile have been decreasing continually for decades: https://en.wikipedia.org/wiki/File:Fatalities_per_revenue_pa...
In SqlServer you have to use MERGE with HOLDLOCK to avoid issues, is it possible in Postgres? Is it so by default?
"That's how startups do it" is the startup equivalent to "That's how we always did it" at big companies. And both approaches suck equally.
Show HN: Comment on live websites just like you comment on Google Docs/Figma
I'd love your feedback on this new JS plugin we launched. With this, you can comment on live websites just like you comment on Google Docs or Figma.

You can use is to get Copy or UI feedback right on the website you are building. Feedback can be provided in rich formats like audio and video.

You can get started by installing a JS tag in the footer of the website. You can then turn the review mode on or off on demand by adding “?review=true” to the URL.

Demo video (43s): https://www.youtube.com/watch?v=cdnfBEw8TfI
Demo video: https://www.youtube.com/watch?v=h6vxzXJuh8o
Optus customer site was on cybersecurity blacklist
I have a similar experience: I can quit in three days provided I'm relatively stress-free and not the companion of a regular smoker. I can stay quit for months, even years, but particular stresses knock me off the wagon.

One cigarette is all it takes; it's not a slippery slope, it's sheer cliff.
Nah, for extra context you are here: https://news.ycombinator.com/item?id=33334857
True, I have used it briefly on sub $100 Chromebooks.
> By which process do you do that?

It's not a constructive proof, you don't need to give a process.
Amazon has the best inner-company relocation policy IMO. Basically, if another manager accepts you on their team, nobody in Amazon can block your move.

People use this all the time to look for teams with very easy or non existent on call and relocate super easily to places they want to live in, including Europe.
If Cloudflare is masking your origin to provide WAF capabilities, which it does for most - then I'd say this is expected results.
Make that three: the beginner/explorer playstyle is also accommodated very well.
Currently looking at a 1000 line webpack config..........
Negotiation skills apply about everywhere in life. Not learning them can get very expensive.

> I have an offer from the other company

So take it!

> Can you be flexible with the base pay?

A better way is to make a counter-offer. May I recommend the book "Never Split The Difference" which has a lot of good information about negotiating. Remember your most important power is being able to walk away.
> To see how it's syntactically simpler than S-exps (...)

Has anyone ever complained that S-expr were too complex? Adding white noise as a tradeoff doesn't seem like a win.
Unfortunately these Twitter metrics are then packaged up to show on the next investor pitch. It's a vicious cycle.
We need to clean up the subscription pages, we're actively working on that rn.
Yes, certainly, but the article seems to imply that the author solved those Photoshop problems by creating a Web-based tool, while the actual solution is to make a lightweight tool.
Your Father is a Gangster.
Webpack 5 was that push to fix the monolith. I would guess that after that herculean upgrade effort that the creator of Webpack has a pretty good idea of what’s fixable and what’s an inherent limitation of the existing tool.
Yesterday, I started getting HTTP 409 errors on some of the domains. It's still happening - wondering if this is related at all.
The root of this problem seems to be the widespread availability of 64-bit CPUs.

≥ When this code was first written, most processors had 32-bit registers and 4GB of addressable memory, so allocating 1GB strings as input was impractical. Now that 64-bit processors are quite common, allocating such large strings is feasible and the vulnerable conditions are reachable.

One has to wonder how much code written in the past 30 years has safety checks assuming 32-bit processors which now have vulnerabilities like this one. I'd bet quite a lot.
Ask HN: Good resources for slow test suites in RoR applications
For a while now I’ve been trying to think of creative ways to improve the test suite of a rather large Ruby on Rails application.

The CI/CD pipeline for this test suite constantly has flaky tests and can take on average 1hr to run.

I can’t think of any good places to start other than using a test profiler.

Does anyone have experience with this journey or similar?
Was Vercel the original creator of webpack?
Macrometa claims it can run your microservices as functions and container running concurrently across 175 cities globally with shared durable state if you use their Global Data Network (GDN) as a globally distributed back-end platform.

They provide a global data mesh with a KVs store, a JSON Doc DB, Graphs, pub/Sub, Event Stream Processing, Complex Event Processing, Search along with edge functions and containers. Used by large enterprise customers like Verizon and twilio as well startup and fast growing SAAS players like DevCycle and Resulticks.
When you set `const io_mode = .evented;` the stdlib observes that value and

- flips I/O functions to evented mode, both by setting the correct flags when creating, say, a socket, and also by having `suspend` and similar keywords in the winning branch of some comptime conditional statements, causing the functions in question to become async also in the language.

- instead of directly calling into main at program start, it starts an event loop and schedules main on it

This is all userland stuff based on a convention, none of this is ingrained in the programming language itself and it could very well be that in the future things will have to be done in a more explicit way.

Async functions are single frames (as opposed to being green threads).
As a compiler engineer myself, I dislike dogfooding in the compiler itself. It biases us to design the language for the compiler use case, and that is in fact a very niche use case. I much prefer having a side project that uses the language I'm implementing, instead of using it to implement the compiler itself.
There are lots and lots and lots of mental shortcuts one can take to get an approximate answer.
If the keyboard is the only thing holding you back from using it, there are 3d print models available of keyboards that you can put on it.
No, it’s like driving a car whose airbag is known to have a fault that will send shards of material into the driver’s face in the event of an accident. (A real issue that many manufacturers had to issue a recall for.)

This is actually a great analogy now, because Apple (or whoever) regularly issue “recalls” for their known-insecure software in the form of software updates. If you follow the discussion in the info sec community surrounding these updates, often the vulnerabilities that are patched are being actively exploited.

One recent iOS update that comes to mind is one that patched an issue where a PDF sent via iMessage could give remote code execution with no user interaction or visibility. (Actively exploited.)

So yeah, you can drive around with your faulty airbag if the possibility of getting your face mangled doesn’t bother you. Or you can just follow the recall procedure, which is a bit inconvenient but it seems much less inconvenient than facial reconstruction.

And if you don’t care about your data being compromised and sold to bad actors, who may then steal your identity and cause a LOT of trouble for you, then by all means run known-insecure software. That seems like very poor risk assessment to me.
This is unbelievably condescending.

I'll follow up on your false analogy to try to get you to your mistake: even Monet had to learn before he became Monet! Even Monet had to fight before he became Monet. He even got rejected and created an art salon because he and his peers were misunderstood by art intelligentsia.

So by rejecting engineers that you deem not worthy of being artists, you're just putting yourself in the position of the bourgeoisie that rejected Monet in the first place.

You're ignoring potential for talent. And really am I glad you're doing that because I then get to train and hire them.
It's all smoke and mirrors.
Yeah I just learned about Vite a few days ago, and Turbopack today.

Apparently rollup is used under the hood by Vite, and the plugins and config syntax are compatible, but I couldn't get my rollup config to work with Vite.
I've been curious, with the EU "cookie banners everywhere" and Apple iOS privacy moves, is there a new first party analytics startup scene? Is it big and healthy?

Anyone have some favorite companies doing this?
I think webpack has overhauled 1 and 2 every major release.

Accordingly the docs and API and blogs are littered with a mish mash of all previous APIs.

Thats the whole problem with webpack-its always changing.
You just reminded me to go into my notification history and turn on "Override Do Not Disturb" for the earthquake early warning notification. I really like the notification history for that; you can go back to a notification you dismissed hours ago and edit its settings.
It is expected result yes. Not disagreeing with you on that. I am simply saying that CF is not "hosting" the site. It's the middle man. The host is hidden.
Well, int main (void) { return 1; } is most likely bug free. But it's not useful (except as /bin/true).
The price hike on Youtube premium is insane. I guess it makes sense when every other product you try to bring to market ends in failure. If Google is the creme de la creme of software engineering companies, full of absolute geniuses, why can't they think of a product that people actually want besides charging more/putting out more ads for the products they have?
This article seems pretty questionable because they combined very different situations together. There's no doubt that car companies have big backlogs from shortages of parts needed for final assembly of vehicles, in large part needing semiconductors. Tesla has mentioned this, rivian is another but legacy auto also sees this. But the article conflates possible oversupply in different market segments like cloud, GPUs seem to be in oversupply too says Nvidia even though that won't help car makers. It's just a terrible article.
I think you probably mean mercurial (hg) which is indeed written in python. Subversion (svn) is written in C.

Mercurial actually wasn't a bad choice at the beginning of the DVCS era on Windows as git didn't work well on that platform initially.
The classic "holy hand grenade".
We had one of the first class of HP3000 minicomputers, which was both highly advanced, with it's stack architecture and variable length memory segmentation, but also very disappointing. But on the flashing lights front, the first design class did not disappoint (see console in upper right quadrant - lots of LEDS - which were new and only red in those days - and paddle switches): http://www.hpmuseum.net/images/3000_2615A_1973-25.jpg
This is presuming they expect 100% confidence.

If they are fine with a lower bound of confidence, then that's already the current situation.
I agree, and that's okay, but the problem is that many people assume Zig is colorless. I just want to dispel that notion.
What are you smoking? :-P
Treaty of Rome. Maybe North-Korea did not sign it but that is nitpicking.
These are all obvious answers. Still begs the question of what's the value of having these discussions here. There are plenty of discussions that are not permitted on HN (even if they would garner useful discussion). I only posit that this type of news also lends no value to this forum (SV locals don't or shouldn't depend on HN for local emergency news), and so should be removed/banned. Just my 2¢ - downvote away.
> Our third quarter revenues were $69.1 billion, up 6% versus last
year or up 11% on a constant currency basis

"Constant Currency Basis" seems to be the latest innovation in the non-GAAP methods of reporting revenue. The creativity of the financial industry never ceases to impress.

Thankfully we do have a set of "Generally Accepted Accounting Principles" that helps see through the bull.
The people involved in making the dopamine delivery shows also consider that an expression of their creative abilities. Just to throw a different perspective into the mix.
Revenue is down for YouTube, compared to last year. Maybe this explains recent increases in ad placement [1] and the choice to gate 4K quality behind the YouTube Premium subscription [2].

[1] https://www.theverge.com/2022/10/4/23386782/youtube-premium-...

[2] https://9to5google.com/2022/09/16/youtube-ads-unskippable/
NYC Ordered to Reinstate Workers Fired for Covid Vaccine Refusal
Repost:

https://news.ycombinator.com/item?id=994794
https://news.ycombinator.com/item?id=17765446
There are many, many ISTAR satellites that work in visual, infrared or SAR for various intelligence agencies and militaries. But that's not necessarily good enough to home in a SAM, they don't have enough TX power (we're talking about hundreds of kilowatts or even a megawatt of TX power in pulse), and they are too high/far (radar reflection energy decreases with the fourth power of distance). The satellites are still terribly useful though, just look at what's happening in Ukraine.

The next major war will probably see a destruction of most or all of those satellites, and consequently a multi-century pollution of the low earth orbit with extremely fast deadly debris. Multiple countries already have anti-sat weapons, and they're even getting deployed to "3-rd party" countries. For example American ballistic missile defence installations in Europe (Aegis-ashore).
> Python works around it by having so many libraries built in C or C++.

Which works quite fine, until it doesn't.

By than the needed rewrite in some language that delivers decent performance and safety all over the place in one package will be very expensive.

I'm not saying that you should avoid Python (and its native code kludge) altogether but when using it just pray that you never reach that point mentioned above. It's a dead end and will likely require an almost full rewrite of a grown, business critical (and already heavily optimized) application.
I hear you—it took this somewhat unexpected turn into horror so I just ran with it, but it's not where I was going originally... I guess the bombs dropping in the horizon made it eerie? It was supposed to be post-apocalyptic but it decided to dial things up to 11 and bam!! "The Necronomicon"
I've been using emacs on mac for decades.

check out: https://emacsformacosx.com/

That said, occasionally upgrading doesn't work as expected, and I stay with the previous version. I'm on 27.2 because something didn't work on 28.x and I haven't debugged it.
love the format!
Thanks for taking the time to look at this. ;)

What you are getting is the plain Jevko parse tree.

The examples explicitly talk about a format built on top of that. See this answer: https://news.ycombinator.com/item?id=33334314
Google engineering team is supreme but product team is subpar.
Understanding Transit Infrastructure Costs in American Cities
Is there anything stopping you using it for SDR regardless?

With the Pi CM4 module installed, there are loads of options that will work just using the USB port.
> The former also runs a myriad of other addons which increase privacy.

Unfortunately, the more custom your browser behavior gets, the more finger-print-able you are :/

And that's not even considering potentially harmful plugins (either inherently so, or via browser store account takeovers).
I spotted this in my account. I was originally under the impression youtube premium would be 15 bucks a month... some how it's now up to 30 bucks a month. 6x AppleTV and 2x Netflix.
I don't understand how that can be true. I put a deposit on a new Hyundai last month and Hyundai Canada is telling me it won't even be built until February 2023, specifically citing chip shortages.
Thor: Love and Thunder - Feel free to run and pee whenever you want.
Most of the countermeasures that are sold (such as AntiVirus software) are pretty much snake oil. The single easiest and most important thing you can do to keep your systems safe is to keep them updated.
How is Rectangle better than BetterSnapTool?
I bet OP was his student
How would you embed SQLite into other programs if it were written in Rust? Isn't the lack of basically all dependencies the main advantage?

(I'm actually curious, how does dynamic linking work with Rust? Can you build a .so/.dll/.h pair and ship it everywhere like with C?)
Are the benchmarks used for generating the results on the website available for us to poke around in? https://turbo.build/pack

I'm curious about the "Cold Start" time for 30k modules taking 20s, which still doesn't feel like the best possible experience, even though it's a significant improvement over the other contenders listed.

Is there a separate, faster "Warm Start" time after everything is cached? Or is this it?
The Turbopack project is led by Tobias Koppers, creator of Webpack
>In the US, at least, the IRS frowns a bit at people over-using business deductions.

Fair, tax laws are different everywhere. Your mileage may vary.

>"Any new gadget or widget" might be deductible if your business includes, say, reviewing new gadgets and widgets. If you're a software developer, though, kitchen gadgets--for example--aren't generally considered deductible. In fact, if you're a software developer, very few things are.

The magic is in how you justify the expense as part of the business. Nothing stopping you from putting crappy reviews online for everything you buy and then deducting your life expenses.
> There is just such a disconnect with reality here I am having a hard time thinking the author has done any actual technical recruiting.

Agreed. Not to mention that the author leans very heavily on the notion of "great engineers" as if that describes even a small fraction of candidates. In hundreds of technical interviews across a decade of interviewing in multiple industries, I can count on one hand the number of actually great engineers I've encountered. 99% of everyone who calls themselves a senior software engineer is mediocre at best. I'd rather hire someone who can do the specific work I need them to do who isn't otherwise very good at engineering, because that means I can fill the role after two interviews instead of twenty.
> No one pays for volunteer work (by definition), but there's lots of volunteer work that, if people stopped doing it, our society would grind to a halt. One example is open source software;

I contribute every day to Open Source software. The "pay" I get is not in terms of salary, there are many other benefits.
>It actually sounds pretty terrible to pay $10/mo to watch a single show

Yet people pay >$10 per ~2 hour feature at the theater.
They seem to have walked back both of those and instead have just lifted the price of YouTube Premium as a whole [1]

[1] https://techcrunch.com/2022/10/21/youtube-premiums-family-pl...
For those who have never heard the term (like me), here's a link: https://www.investopedia.com/terms/c/constantcurrencies.asp
> teacher/student ratio and class sizes are much worse in Germany

That very much depends on the subject. In CS I even had classes that took place in the office of the professor because there only were a handful of people. For seminars we went into a hotel in the middle of nowhere for a few days with about a dozen people total.

If on the other hand you study BWL (business administration) during the first year or two it's very crowded in even a large auditorium. That's because that is what all those people end up signing up for who don't really know what they want, and "business" always is the fallback and safe choice for many. The more concrete and STEM-y your field the less of that problem you will ever see.
Weird. I am also in Alameda and didn't feel it but my kitchen cabinet door was slightly tapping against the cabinet which caught my attention. This is on the east end.
In 2015 or 2016 o was taking the computer architectures class at my local university… the processor they based the whole course upon was the motorola 68000.