skysight-inc/HackerNews huggingface dataset:
It's not about the borrow checker in this case. The borrow checker deals with ownership, which mostly protects against thread safety issues, data races, and use-after-free.

Here we are dealing with a memory safety problem of a type that cannot occur in Rust unless you use `unsafe` blocks. Rust doesn't allow unsafe memory access such as pointer arithmetic or out-of-bounds operations (those produce a runtime panic). C happily accepts those, and the effects may include buffer overflows leading to arbitrary code execution.

This should never, ever be possible when writing a normal program. I love that Rust has named the keyword that enables such things "unsafe", because that's precisely what it is. That C has this behavior as a default is nothing short of madness, though of course C is an artifact of a time when such issues weren't understood as well as they are today.
The cards are just insanely wide, look at this photo:

https://imgur.com/a/VqTU1QR

Why would you still put the power connector on the side where the card will definitely get very close to the side of the case?
Why? The compiler knows what the type is, the ide can tell you the type if you need to know - it’s redundant for you to have to type it out.
As long as my actions re spam removal still work they can do what they want globally. Take them away and I will learn how google forwards email.
> So docker+WASM does not build a Linux container image with the WASM application inside but it builds a WASM application packaged as a docker image

With this preview, we are leveraging the OCI specification that defines how to build an image. Linux/Windows containers are the most common use of this specification, but many other types of artifacts exist (OPA policies, Helm charts, etc.).

When using any of these other artifact types, tooling has to know how to use that specific artifact type and run it (eg, extract the image and run it as a container or extract the Helm chart and deploy it). In our Wasm use case, we are doing the same thing... package and ship a Wasm module and we'll extract it and run it on the new Wasm runtime. That runtime then "converts" the Wasm module into native machine code for the OS you're running on.

> If this is the case I'd leave docker outside the name of the technology. I imagine the confusion.

That's great feedback! While most know us as "the container company", our mission doesn't even talk about containers. We want to help all developers succeed by reducing app complexity. We can certainly do more to help educate folks between the different types of workloads you might be running. We're still very early on in this process, so stay tuned (and keep the feedback coming)!
Forthcoming OpenSSL Releases – Critical Issue in OpenSSL 3
There are a lot of companies dependent on TSMC, not just Apple.
Incorrect. Crimea was invaded in 2014. My point was that in 2012, it was 2 years before the invasion, and less foreseeable despite how quickly in the grand scheme of things it came afterwards.
That's a different bug.
Metafilter Is Close to Insolvency
Reduction in installed sizes in something to celebrate. Makes you wonder how they cut it down from 20gb to 15 for laptop install
Ask HN: What Happened to the Reddit IPO?
It was all over the place rumor-wise, and now there's radio silence.
Rust is written in Rust today, but it was bootstrapped in OCaml.
Wait, is my favorite password manager written in my favorite language? Goodies.
RSS Link Archive
So I played with the idea of writing an RSS reader for myself. For many months I have been using newsboat, but I wanted to create something my own, from scratch. Not sure why, but I started storing the links.

I was surprised recently that there are people interested in things like that:
https://www.tdpain.net/blog/a-year-of-reading

- currently there are 89997 RSS entries right now / 875 marked as 'favorite'.
- collection started at 2022/09/2022-09-05, where some where added manually from my collection of "very important links".

I am curious if anything useful could be achieved by collecting links from the internet. Maybe not. Maybe collecting RSS links is not useful, and not worth at all. On the other side I am happy since I have learned many things in that journey: Django basics, found interesting RSS sources (like Hacker News).

My inspiration for this project are:
- there was a video made by Luke Smith 'YouTuber', as he rambled in woods that YouTube creates cons00mption list. It is certainly not a database of very important videos
- Google decreases scope of some news, or some sources, so I wanted to create some sort of engine that will provide data as-is rather than filtering it, or ranking it
- I hold the data not some third party entity (feedly)
- I want some sort of data that are not tampered with, or straight up removed after 10 years because it does not 'fit narrative'. I know that this is not achievable to replace popular search engines, and I think I do not plan on doing that
- somehow also "Dead Internet" videos (but not directly)

Any thoughts?
Pass-by-value, reference, and assignment in Python
No to Vobla
I am pretty sure, people who build Facebook or Messenger apps for Android does not use the app. If you use Facebook or Messenger for more than 10 minutes, you would find at least 2 very fundamentally wrong bugs. I would have fired most of the developer if I were the CEO of Facebook. They are not competent to work at Facebook
Without getting into the weeds of it, I'd say smooth out the rough edges in your development experience and make it behave as similar to prod as possible. If there's less friction there's less incentive to cut corners and make hacks imo.

Some pain points:

- Does it take forever to spin up infra to run a single test?

- Is grabbing test data a manual process? This can be a huge pain especially if the test data is binary like avro or parquet. Test inputs and results should be human friendly

- Does setting up a testing environment require filling out tons of yaml files and manual steps?

- Things built at the wrong level of abstraction! This always irks me to experience. Keep your abstractions clean between which tools in your data stack do what. When people start inlining task-specific logic at the DAG level in airflow, or let their individual tasks figure out triggering or scheduling decisions is when things just become confusing.

Right now my workflow allows me to run a prod job (google cloud dataflow) from my local machine. It consumes prod data and writes to a test-prefixed path. With unit tests on the scala code + successful run of the dataflow job + validation and metrics thrown on the prod job I can feel pretty comfortable with the correctness of the pipeline.
If course LLVM is Free Software. It’s available in the mainline Guix and Debian repositories, and its Apache license is recognized as Free by the FSF.
Why does meta have 10 million lines of code just for Android?
Weird example. JS took a long time to take off, and had virtually no marketing budget.

Or is your point that JS took off despite that, and so maybe is high quality? I think that's wrong too.
The Nvidia Founders Edition cards have tiny PCBs, due to their relatively small coolers and the flow through design. There isn't space for 3 8-pin connectors. And yes, that was definitely a choice but they're sticking to it.
How was Apple able to maintain its production of iPhones in China during the height of Covid-19 in China?
> Did you chose a bank that has an international footprint (and would be forced to comply to FATCA sooner or later)?

Yes and no. Neobanks weren't a thing when I was getting settled in Asia (I think Simple launched in the US ~two years after I landed), but I use Bunq - which, as far as I know, has no US operations - in NL and my local Sparkasse in DE.
Why can't a Go program fork into the background?
Why I think an invasion of Taiwan probably means WW3
Square rigged ships (the pirate ship most people imagine) are designed primarily for speed running with the wind. They would sail more or less down a line of longitude to a trade wind and then sail in the direction of that wind. They could tack of course but they were really not very good at sailing upwind and that was essentially a design trade off to make them better at sailing in the trade wind.

Ship builders of that time did, of course, know how to make more maneuverable ships with different types of rigging. These would all be used for different jobs, eg coastal and fishing.

But for long distance transport, speed with the trade wind was the most important consideration.
It’s more like $1 these days due to the bear market, granted these remain high fees.

Cheaper payments can be sent on a zero-knowledge Layer 2 like starknet or zksync. Beta services but usable (except the whole on-ramp off-ramp part). Once sharding is implemented, fees are likely to drop to sub-cent levels.

Ideally payments would be anonymized on a privacy-preserving L3, but I don’t think those exist yet
I bought it 5 years ago and haven't given them a dime since, and got a lot of new feature since (scripting!). I'd love to have more library, but that's another issue :)
I don't dispute that - but Apple is still on the line the most of any company if TSMC were to become unavailable (in sales, in products requiring TSMC chips, lost sales, Apple Silicon on all of their devices, so forth). Also Apple had the most capital of any company and thus the least excuse for such dependency. 4 years ago, according to CNBC, they had $285 billion in cash reserves. That could've definitely bought some fabs in America that would be coming online right now.

NVIDIA still can make parts in Korea if need be, even if they are a generation behind. AMD could be manufacturing on Intel foundries before we know it. Samsung has Exynos in Korea as well, which is better than nothing.
Xml+sftp For data transfer in 2022, best in class yeah!
That's why it was painless.
Fair point, but the Rust compiler is not there at runtime. It also only needs to be written once for all the Rust programs, so assuming Rust is safer, you restrict the unsafety to the compiler (and the unsafe constructions of Rust, which are clearly marked as unsafe if memory serves).

(the Rust compiler is written in Rust, but the LLVM backend it uses (and soon GCC, IIRC), is still written in C++)
> One problem with this survey is that while it is primarily aimed at existing users

I don't see how this is a problem. The survey wants to see how existing users use Emacs, not how to make Emacs accessible to new users.

If you want to make a survey to see how to make Emacs more accesible to new users, by all means, create such a survey. But this is not that survey. This survey has a different goal.

I, for one, appreciate the goal of this survey. As an Emacs user myself, I want to get a sense of how other Emacs users use Emacs, which project management packages they use, what completion packages they use, how popular Magit is and other general trends among existing Emacs users. Why is that a problem?
Very much agreed. I also take issue with the 'received wisdom' that eking out productivity from people at any cost to their physical or mental health is actually producing more benefit over the long term, it seems more likely to me that it's just externalising the increased societal/healthcare/other costs for short term benefit
Eh. My city has tons of areas without a grocery store within a mile. Poor neighborhoods and fancy ones. I chose my current neighborhood due to grocery stores proximity and variety.
Wouldn’t it matter if that 10% was in a concentrated area? As in whole neighborhoods?
For everyone wondering what Apple had to gain from Lightning connector, they collect licensing fees, as well as prefer other Apple devices.
Once everything gets wheels/bumped, it'll be a lot easier. The last few major versions have been fairly straight forward to upgrade once they're all in place, and the nice thing is this should hopefully fix any remaining packages that aren't built for the arm64 macs.
I have been searching in the past for such a project. Great initiative
It sounds from the article that "-fstack-protector-all" might remove everything except the denial of service.

"...arbitrary code execution is confirmed when the library is compiled without stack canaries, but unconfirmed when stack canaries are present, and denial-of-service is confirmed in all cases."

Everything should be compiled with all available compiler defenses:

https://manpages.debian.org/testing/devscripts/hardening-che...
I ran into Coffeescript code on GitHub for the first time in years last week. Oh, Coffeescript, I remember that used to be a thing.
I agree with both of you guys. I've had my 11th gen Framework (DIY running Linux) for a year now, and I'm in love. However, I wouldn't recommend it to the average person. That person should probably just get a cheap Chromebook (not the $999 one sold by Framework), or Surface Pro running Windows S mode that's impossible to break (in software), which runs perfectly out-of-the-box and can go to the Best Buy Geek Squad or Microsoft store whenever they need help. My opinion is that the Framework will never be a mass market product because the average person doesn't want to spend time choosing individual hardware components and taking it apart to swap them when they need a repair or upgrade. I think they should just double-down on serving the niche desktop Linux and tinkerer market.
It's final in the sense there will be no other 3.11.0 version.

If you want to be pedantic, 3.11.0 stable would also be a bad name - what if it's not actually stable but crashes all the time?

And 3.11.0 actual, what does it actually mean? Is there a non-actual 3.11.0?
Off topic: Why does every company use the word "sunsetting" these days instead of "ending", "shutting down" etc.? I cringe every time I read it.
If I were Shutterstock, I'd turn this into a service to generate instant stock photography for any situation you can describe -- for a fee, of course.

Yes, "anybody" could just spin up a Stable Diffusion server and do the same, but plenty of companies would be perfectly happy to outsource this to Shutterstock and, quite importantly, also have them take all the heat for any legal complications behind reuse, copyright, etc etc.
Glad to see this here; glad to take part.
Kinda sad given that Phillips is the legendary company that gave us the compact cassette and the compact disc.
So in addition to getting the file from python.org over HTTPS, you get a certificate attesting that sigstore automatically checked that it was released by the people who owned python.org? What security does this add?

PGP has a web-of-trust aspect, allowing people to trust people. What is the point of something doing automated verification of identity, on top of the one done for HTTPS certificate issuance?
I've used this for six years on macOS. It's been working nicely.
This is one reason I really like Linux and the BSDs. There is a total separation of UI from OS, and due to the command line heritage of UNIX, strong functionality is available without a desktop environment at all. This is also another reason the web has taken over from the desktop.
Container images that have access to an NFS mount from my NAS.

You need to be careful with your mount options here, since soft mounts can cause corruption in some cases and performance is not fantastic (although nfs v4.1 is better than nfs v3) - but overall it works and keeps backups strategies simple since everything is on the NAS.

Sadly - it's fairly slow (sqlite in particular is painfully slow when under lots of load and needs care to ensure only one machine is writing to it at a time) but right now I'm avoiding more complex setups since it's not normally a problem with just me+family using things.

Long term - I've been considering moving to iSCSI, or something more robust, but it just hasn't been worth the trouble yet.

Did make me like sqlite a whole lot less though - I opt for mariaDB/Postgres on any service that supports a remote db - they seems to do just fine. 3 years in on this setup and no corruption outside of sqlite on a soft mount (which was solved by reverting to my last backups).
These crowds are being controlled by those benefitting from the status quo and the status quo, practically by definition, has its own momentum - "this is the way we've always done it." Many people legitimately don't understand how doing what we did in the past won't work or even cause harm going forward. That's the heart of the issue.
I'm amazed people still use WhatsApp. We mostly abandoned it in the United States back in the mid 2010's. I mostly use it with friends over in european countries, just like I do with people in China with WeChat.
Ask HN: Corp gives “contractor” benefits, want “employee” obligations, what now?
I am a remote worker in a country that is not the same one as any of the company offices (they have multiple offices in multiple countries).

They hired me as "contractor", but promised I would be treated as employee, to facilitate things legally.

Things went good at first, but now they been treating me as contractor regarding rights, but employee regarding what they want from me.

- I have no vacation, no paid sick days, no leave, no benefits.
- One of the owners (he has a huge amount of shares) explicitly told me I will never get a raise, because contractors don't get raises.

At same time:

- I have to work in specific work hours
- I have a manager that even micromanages my work and keep pestering me whenever I don't reply promptly, can't even go to the bathroom without my phone without this guy noticing.
- I got a semi-leadership position, I don't have any employees under me but there is a project in the company that I own completely and make all decisions, and whenever someone else screws up on that project I am responsible (even if they don't report to me directly).
- Whenever a project is late, I have to help and work unpaid overtime (in fact I worked the past months 12+ hour per day including weekends, also having zoom calls with clients 4:00 in the morning is a thing that happened).

Also despite my speed being faster and faster, with more and more Jira tickets completed, enormous amount of Git commits, and clients being happy with my work, my manager keeps saying I am underperformer.

To be honest I wanted to quit, but I am living paycheck to paycheck with zero savings after I had to expend them because of a family member car accident. Other employees been quitting for a while now, company has very high turnover, including losing lead engineers that didn't document their work so many new employees have no idea how the company tech actually works.

Also the jurisdiction of my contract is UK, but I don't live in UK, and I am not UK citizen, I am not sure if I even can sue them, or if I was going to sue them, what kind of lawyer I would have to look for.

Contract is full of sketchy stuff, like they owning even my personal diary if I wrote in it during my contract, or owning my private correspondence.
To make the analogy work, consider that Alice and Bob are 2 miles apart, but Charlie owns so much of the land around them that the shortest path between them that doesn't cross his property is 200 miles long.
The human mind has been doing this forever. Taking inspiration from others and creating new art.

As far as I know it’s even legal to study the style of one specific artist and create imitation art as long as it’s clear that this is a new artwork from a new artist and about ~50% different from any existing works.

So a prompt like “a photo of Times Square in the style of Ansel Adams” should be ~50%+ unique.

The trickiest area for these models might be prompts that recreate existing work.

Given a prompt like “a black and white photo of Yosemite Valley in the style of Ansel Adams”, if the model is too good, then it seems like copyright infringement.

But as far as training data goes, as long as it’s acquired legally, I don’t think it can (or should) be regulated.
To everyone who worked on System Settings, you put in a ton of work, and you're all very talented to ship something in a new framework (SwiftUI) that has gone on to millions of devices.

I only have one question: who was in charge of the thumbs up / thumbs down on this new design? Was it Craig Federighi?

You all did amazing work with the tools offered - SwiftUI makes the side bar navigation and simple cell table views the easiest to iterate and create - and you all achieved that. Someone should have stepped up though and waited till next OS release for a change like this (with the new SwiftUI layouts, etc) - or potentially not touched it -

or explain in depth why a side bar makes sense for settings, the most cognitively demanding part of an OS now with superfluous information on the side? That's critical real estate to lose, then doubly hurtful with visual clutter / something were expected to ignore.
> "Operation National Sword" or "Green Sword"[1] from China in 2017 killed most recycling in North America and Europe

A large portion of "recycling" sent to China was actually landfilled or incinerarted in China. So it mostly "killed" us sending off our waste to somewhere else pretending we were recycling it. Single stream didn't actually "work" even when we sent it to China -- the Chinese government just thought the amount of money we paid them to landfill or incinerate plastic and other solid waste (after shipping it 7000 miles!) while pretending to recycle it was worth the environmental consequences to them, until they didn't.

> According to the report from two American advocacy groups, The Last Beach Cleanup and Beyond Plastics, American recycling statistics counted exported plastic waste as “recycled”, despite the reality that, once they left US shores, they were more likely to be burned or dumped than recycled. The US plastics recycling rate peaked at 9.5 per cent in 2014, and a large chunk of that was exported to China.…

> China imported 8.88 million tons of plastic waste before the ban, and a January 2021 study in Nature Communications, a peer-reviewed journal, found that 70.6 per cent of this waste was either buried or mismanaged…

> “After China’s 2018 ban, countries found other destinations to send their waste to, which did not have as strict regulations as China. The same problems that caused China to stop importing plastic waste were then transferred to other countries,” she said.

https://www.scmp.com/news/people-culture/environment/article...
No surprises here.

Cards should've been deprecated as a payment method long ago.

Brazil's Pix, Netherlands's iDEAL, Poland's BLIK, etc, are all better payment methods that follow a push model (i.e., the customer actively confirms the purchase on their phone) instead of pull model (i.e., I send my card details to the store and it forwards it to the card network).

I really hope the EU gets its shit together and moves forward with TIPS[0]. I would love for this to become a requirement for all banks in the Eurozone.

[0] https://www.ecb.europa.eu/paym/target/tips/html/index.en.htm...
I assume there is no alt text and caption possible for images on Google Docs?
Ask HN: Where to watch skilled developers writing code and explaining ideas?
In a project context instead of a programming course.

Specific language that I want to learn:
- Java
- Typescript
- Golang
- Rust
> I find coroutines a really strange and leaky abstraction (and the prevalence of suspend methods in libraries which you have to wrap all the time just to call them synchronously is really annoying).

I think the point is to be calling them asynchronously. Unfortunately async programming is kind of contagious and difficult to shoehorn into sync stuff but if it’s written asynchronously there’s usually a reason.
nonsense

this line has zero readability

you're not writing code for compilers, you're writing code for people
They designed a clear and fitting code pattern
that you didn’t come up with

OP's problem isn't premature optimization, it's premature arrogance.
Likewise, I was filling out the survey while not on my work machine where I use emacs.