skysight-inc/HackerNews huggingface dataset:
Well, he shows the bug can be found after a second when fuzzing!

Some years ago, I have reproduced Hanno Böcks fuzzing to find Heartbleed "again". It wasn't that hard to do and I was completely new to the whole thing. Everybody had time to get up to speed with that as I did and implement it in the workflow.

The manpower problem becomes worse over time when you do poor quality work, because things are not really done and you cannot fully concentrate on further work because there is so much maintenance and rework. Stellar work doesn't have to cost much. Good, reliable software can get built extremely cheaply.

Of course, OpenSSL and many other projects face many typical problems. Protocols are under specified, sometimes extremely complicated or the way the protocol is described is extremely unreadable and for all these reasons the specifications are not crystal clear. Then you have practical implementations that can vary a lot, if the standard is poorly written/ thought out or one implementing party has a monopoly and can do whatever they want they tend to diverge. Then of course, there are protocols which originally were simple but got extended over time with things that are used everywhere but not really standard and such. Also, you can have wrong tools or use your tools badly. C and many other languages require a lot more discipline than some viable alternatives that would in many cases cream at you or handle the situation for you. C is like a table saw without safety. Yes, it does get the job done but you might loose a finger or a hand in the process and even the best do at some point.
Parsing anything in C seems to me to be a clear "danger" zone, where you tripple check everything.
This. The gatekeeping can be intense : "must be proficient in C++ template metaprogramming", etc.
1.5m excess deaths in the US alone. "from COVID" or "with COVID," however you want to slice it. The obvious factor is the global pandemic from a novel airborne virus.

The conspiracy thinking assuming some sinister ulterior motive from government actions is just a harmful trope, and wrong.
https://coqui.ai?referralCode=q8jfhfs&refSource=copy help us move up the list!
People keep saying this but MSPUS keeps on going up https://fred.stlouisfed.org/series/MSPUS
I have been charged by ATT the same fee even when just swapping a physical SIM.

Apple worked out a deal with the mobile networks where if you buy from apple.com, the price of the phone includes this “activation” fee.
The beauty and tragedy of our culture is the ability to leverage your future for a moonshot. It enables some real treasures to be discovered who can share their creations with the world, but each comes with the invisible cost of hundreds and thousands of failures who must "settle" for an average life. The success of the fortunate comes in no small part out of the investment of time, energy, and money from the failures. Young people are the worst at risk-assessment and at thinking through long-term costs, so most will happily alter the shape of their 99%-probability future if it improves the shape of their 1%-future. Dreams are powerful.

You can do something you don't care for without making it your life.
Please, everyone is supposed to be slagging C++ (and me), here. I'm sure there will be rich opportunities to dis PHP, in other threads.
So, the context for these "... is the next C++" talks, blog posts and papers is largely Chandler Carruth's CppNorth talk: https://www.youtube.com/watch?v=omrY53kbVoA "C++: What comes next?" which is also the "coming out" for the Carbon language.
Mint's $30/month plan only offers 5GB of hotspot data, and I couldn't find any info about data-only SIMs (which Google Fi provides for free). Additionally, to get $30/month you have to commit to an entire year.

Obviously, for some people, they won't care about these features/downsides and consider the plan worth it. But comparing it to Google Fi as an equivalent but cheaper option is just misleading.
> It's only on Firefox and not on Chrome. So it's clearly not about privacy

Yup. I knew it wasn't about privacy when their website worked "fine" just a few months ago. Their competitors, and my banks, still work fine in Firefox's Privacy Mode. So there's absolutely no real technical reason whatsoever for them to disable it.

> there was some bug that they decided not to bother fixing and took the lazy way out

My guess is that the bug being that Firefox's Privacy Mode actually prevented a lot of T-Mobile's invasive tracking.
Depends on your opinion of Rust and the associated community.
Show HN: Build-your-own bedtime story generator
Demo is broken but it works once you login to a free acc
Personally, I would love to work in c++. It’s my favorite language to work in. I have over a decade of experience with it professionally. But, seems like most jobs these days are python.
> One of the big reasons why FP languages have so little penetration is because the advocacy usually feels like someone trying to talk you into a religion.

That's exactly what worked for OOP—have we collectively forgotten just how hard OOP was pushed everywhere 15–20 years ago? Way more aggressive than any FP advocacy I've seen, and I've seen a lot. When I was learning to program every single book and tutorial pushed OOP as the right way to program; procedural programming was outmoded and functional programming was either not mentioned or confused with procedural programming.

I still have to deal with the fallout from OOP evangalism; I've had colleagues who unironically use "object-oriented" as a synonym for "good programming" and managers who believe design patterns are software engineering.
> Meanwhile the model 3 and Y dominate world EV sales,

They are the top two models, but they don’t dominate the market: BYD sells more EVs (mix of PHEVs and BEVs) than Tesla, but makes mamy more models. Tesla’s models “dominate” the EV market no more than Apple’s have historically “dominated” the desktop PC market.
Absolutely. Same with turning on a TV these days. People used to flip a switch, now it's a highly technical process that takes a few minutes.
There have been some interesting stories and posts about this on HN in the past few months, with someone even going along with the scam for a bit to alert the employer and call out the scammer etc..
We’re Matt and Eric and we want to share the joys of AI storytelling. We know many in the HN community have played with generative models, but maybe not in the context of creative writing.

So we built InfiniteMonkeys, a super simple web app that uses GPT-3 with parameters tuned to generate entertaining short stories, and text-to-speech to read aloud to you. We hope it makes you chuckle!

Building this was also a ton of fun, and showed us how frictionless it is to turn ideas into simple web apps these days. The MVP only took 1 day to build. For a behind-the-scenes breakdown of how we did it, see: https://medium.com/@mjbleong/87e061e18baf
.net, and C# especially are absolutely fantastic tools for programming. The problem is just that they are embraced by large companies and that is where crappy engineers tend to congregate, in my experience. The bigger the company the easier it is to get lost in the crowd.

I enjoy functional programming, but I'm a wizard with C# and .net, and I can pull a much higher salary continuing to focus there. I can write my own fun stuff in Haskell for myself and will continue to enjoy corporate money.
if you need that address parser, this is a bit more robust and easier to use: https://workspace.google.com/u/0/marketplace/app/parserator_...
A single-cell browser for dynamic transformations on millions of cells
Most languages have already taken the good parts. We barely even consider them a "FP thing" anymore. Callbacks and map() are just things you can do in most languages.

What remains when people advocate for more FP is the more esoteric stuff. (And non-nullability, which inexplicably gets associated with FP surprisingly often despite being orthogonal to everything else in the paradigm.)
Tesla made ~366,000 cars/year in 2019 with 50,000 employees. They currently make ~366,000 cars/quarter.
I share the dream of being able to walk through the woods while working online, but there's no way that Dr. Wolfram's approach would work for me. I just can't walk smoothly enough to read comfortably from a screen, particularly not while avoiding roots and rocks. A gimble stabilizer could help with the text but not the refocusing.

So I'm hoping that AR glasses will do the trick before long. If they can project non-jiggly text into the world so that I can rapidly context shift between them with little refocusing, and let me input by wiggling my fingers, I'd pay a lot for it. But I guess lines of code per hour will decline with speed.
One difference is that Twitter actively promotes trending topics in the sidebar, so it's as if someone noticed that multiple people in the town square were shouting about the same thing and circulated it throughout the town, not just the square, just because of that.

Twitter has always exercised some editorial control over that trending topics sidebar, but it's never been clear to me how much.
And to judge by the first few "flights" of Starship, there will probably be a number of crashed Boosters, to iterate over:

Inventory->Hardware->Raptor2 -= 33;
From one of the replies: “This is awesome. I also love how 20% of the zip codes are wrong. Messy AI future seems really fun and chaotic.”
Brilliant. Whitelist only mode would be that only the people you follow and who follow you can message you, and the ability to mention, ping, or find you is turned off.

That's so easy that a Jr. Programmer of moderate talent could whip that up in a long weekend.
"starting to happen"

it's been going on for a long time... Just more remote work now. There have been numerous developers who have done something similar and outsourced their work after they were hired. One I know was caught because he didn't connect himself and had the worker in China submit his work for him with his VPN creds
Is this the standard "there are servers so it's not serverless" argument? I think at this point everyone knows that serverless usually means someone else manages the servers for you. And that's what this is. Someone managing your cache fleet for you.
> government coercion/disinfo efforts that bribed, bullied, shamed, and frightened low-risk persons

This is an obviously biased total misrepresentation.
I do agree, but there is one problem: You will never be able to educate everyone. People become criminals for many reasons.
Some people just want to see the world burn.
But the rest have to stop them.
It's worth pointing out that less than 6 months ago when AT&T and Verizon both implemented similar "greedflation" price increases T-Mobile posted this:

"Avoid the summer bummer of a rising phone bill from The Carriers and switch to the Un‑carrier’s unchanging rates":

https://www.t-mobile.com/news/offers/takes-aim-at-att-and-ve...

TMobile stands for nothing. There was a time when they competed on price and customer service. With the Sprint acquisition they obviously feel comfortable taking their rightful place alongside AT&T and Verizon as just another shitty megacorp in the cartel. It seems the only real difference between the companies in this triopoly are their awful logos.
I think that the function should be called DWIM instead. Amazing feature otherwise, we really live in interesting times!
There are no "goalposts" to move. Elon Musk has a well earned reputation, and it's impacting how I and others judge his actions related to Twitter.
I run windows on ~4 computers. All are on windows 10.

I haven't actually seen anything from Windows 11 that seems like an improvement worth upgrading for, and two of the machines would need me to purchase a TPM module to get it to install. Some features and lack thereof are baffling. It's been out a year and you still can't move the taskbar, and you can't stop it from combining applications in the tasbar. wtf?

Windows 11 will happen over time as regular users buy new computers and they come with windows 11.
I do the same thing using Obsidian and their Sync service, except I just save the file to disk and the magic happens. Very handy.
Our aspirations for AI once included the assumption that intelligence involved the ability to explain its own thought processes...

Settling for "computer programs with interesting output that don't know how they work but neither do we" seems like a step back. Many things are too complicated for us to parse without remotely approximating intelligence, like next month's weather.
I contemplated doing that, but I don't want to waste people's time.
Top tip (eu based).
Don't hang up.
Let the robo talk.

Often, a human comes on afterwards.
Don't talk to them.
If I'm at home (alone) i try and load some porn on the pc and have that play to them.
Otherwise, go to the bathroom.

They're paid to talk to you....if you're not talking, some supervisor will notice and eventually you get blacklisted.

Waste their time, not yours.
> Dropping the interest rate was unnecessary and caused more harm to vulnerable class than good by increasing inflation.

If the fed's interest rate shenanigans are to blame for inflation, why is it affecting every other country in the world too?
The overhead of card processors, while capped by law in the EU, is not zero, and not everybody can easily set up to receive payments. Various countries have systems like https://en.wikipedia.org/wiki/Vipps which reduce the friction yet further.
I just put a 2FA implant in my arm
I’ve always had trouble with commit-ment
Russia has straight up butchered their rocket industry. They are effectively cancelling everything new and just copying things designed in the Soviet Union with ever-decreasing budgets.

Putin never saw the space industry as anything but a profit center he can squeeze to fund other stuff, once SpaceX made it hard to compete they just gave up.
Prepaid on Verizon has a couple discounts that cut costs, without any lock-in or long term payments.

$10/mo Auto Pay discount on plans $45 & higher after the 1st month. $5/mo loyalty discount applies after 3 months of service; additional $5/mo applies after 9 months of service, for a total of $10/mo on plans $45 or higher.
Well in the base case of no debt forgiveness, the borrower suffers (though I think if it goes on long enough the exorbitant fees colleges are raking in would go down too, solving the other side of the problem).

In the case of bailout/forgiveness, there is the perception that every taxpayer...those who paid their debts for college or those that didn't even go to college, are paying for other's mistakes. So on one hand, the disinterest is on account of the issue not being seen as affecting some people while the bailout brings them into it.

i.e. the anger is "now you're making it my problem, to fix your problem."

In any case, to your point about punishing the colleges, I think is absolutely necessary. It's just that bailing out the debtors does not do that whatsoever, in fact in ingrains the moral hazard and keeps the colleges money train flowing (maybe, unless the government has some common sense to know they have to address the other end of the pipeline).
I'm gonna need a cite and some statistical analysis to back up your "media is biased" claim. One data point on an event that I easily found reporting on isn't going to cut it.
The fantasy is a reality in China. It's not necessary to get to zero cases to have a disease simply not be a major problem, similar to Measles in the U.S. In the general population for Measles R<1, so while it pops up from time to time in some poorly vaccinated communities, for the general population that's been vaccinated, it's really not an issue.

The fantasy with COVID was that you'd get R<1 for a period of time until there was a vaccine, and then the vaccine would do all of the work keeping R<1. Unfortunately the COVID vaccine doesn't do that. Hopefully some day we will have one that does that.
It can have effects on the priority your data receives on the network. This post [0] gives a fair amount of detail - from what I can understand, AT&T gives their prepaid plan the same priority as normal post-paid.

[0] https://www.reddit.com/r/NoContract/comments/oaophe/data_pri...
I loved AT&t's network, but leaving them was a Royal pain in the ass. They kept sending me bills for new things after I had closed the account, and customer service would barely talk to me since I was leaving anyway
Late 90s. It was before Java got hotspot. Java prior to that was incredibly slow. Microsoft's J++ was a more performant runtime than Sun/Oracle java for several years. That ultimately became C#/.Net.

C++ had the benefit of running fast but it had all the problems you can still run into today. I'll never forget that app I worked on where function deep in the stack was returning a reference to a local string variable containing html...
Something like in "The Shape of Water" movie [1] ?

[1] https://en.wikipedia.org/wiki/The_Shape_of_Water
One in eight U.S. adult deaths aged 20 to 64 involved too much alcohol
Not sure what kind of phone you have, but my iPhone doesn’t take over the whole screen (unless locked). I have it set to only show a notification.
I love that the CSS is basically identical. I'm very curious to see if this takes off. It feels like this has been missing for a while.

I really wanted to see something like this for Matrix but despite seeing some functional prototypes, it doesn't seem like anyone stuck with it...
Why does it say phpBB on the upper left?

Looks like a cool concept. The last topic on the federated link on the Flagship instance for lemmyBB,

https://fedibb.ml/viewforum?f=3#:~:text=LemmyBB%20on%20Lemmy...

...is just a dead link. I'd like to see how the federated aspect works as a user.
Pure functional programming is orthogonal to that. In other words: you can have your class that contains a maximum simplified state, no problem. Extending this to be pure functional means that in addition to everything else that you said, the calls to the class that manages the state are now considered as needing "special treatment" in the sense that you can't merely call them, you have to also explain what should happen if there are multiple calls. I.e. the order of execution is not depending on the order of lines of code anymore, but it is defined through the means/syntax that the programming language gives you.
It's pretty good, but what a lot of what AI ŽIžek says isn't purposefully obfuscated.
Part of the equation is that C++ devs just aren't as fungible as Python, Rust, and devs in newer languages (not that being a C++ and a Python dev is mutually exclusive). The reason for this is that a lot of the C++ codebases were written before adoption of open source 3rd party libraries was widespread and codebases were more bespoke in general. So, as a consequence, the effectiveness of a C++ dev in any given org is highly correlated to tenure. It's tough to penetrate as a new dev, and if you have to move companies, it sets you back considerably. It's like a forest with poor soil and a mature canopy; difficult to take root in.
Starship will certainly enable some new things we could not do before, or that were simply not economically feasible. But even then there is likely still a severe limit to the demand for launching payloads. All those payloads cost serious money, and while you can save a significant amount by removing the necessity for very lightweight construction due to the enormous capacity of Starship, this might only move stuff from "extremely expensive" to "very expensive".
Do you not agree that the types of support requests or other feedback from the masses in the free tier tends to be of a much lower quality than you might get from a paid user? The expense of supporting those requests are not insignificant. By ensuring that the product is in a much more stable state before reaching the free tier can help keep those support costs lower.

>It's not the deal breaker or the reason people choose Protonmail over others, even if it can be a consideration.

Yet here we are on a dev centric forum talking about it being a "bad" decision. From a dev perspective, the decision of starting something in a paid tier then (if ever) releasing to the free tier is not offensive to me. A company offers a free thing that has fewer features than a paid tier, "news at 11" type of story it is not. Doing poor research into the limitations of the free tier and complaining publicly about not having access to the paid features on the free tier is also not news worthy. Again, yet, here we are.
So Elon Musk is aiming for 1000 starships towards Mars before 2050. 100/year over 10 year period (or something like that).

Each booster uses about 33 Raptors, and each Starship uses 6. I assume the boosters can be reused between launches to some extend. So they might not need 100 boosters.

But you'll need more than 100 ships active; I assume they wouldn't launch 100/year, but rather 200 every 2 years (due to the 26 month launch windows to Mars). Not sure about the return windows and strategy.

That's at least 200 ships (1200 engines) you need active at any given time + boosters + refueling vessels (Each launch will require 6-9 refuels in orbit).

Additionally, there is the whole Earth-to-Earth transport idea (i.e. New York to Tokyo in 50 minutes).
What happens if you remove/disable the TPM once windows 11 is installed? Will your computer become unusable?
I have somewhat similar feelings, but when I think about it, it's a megaphone some people choose to listen to. You can not use Twitter or not follow him on Twitter or block him on Twitter. I choose the former.
Pretty sure this is like, did you unplug it, wait 10 seconds, and plug it back in again? They want to say "listen carefully" but have to dress it up a bit so it doesn't sound rude.
How do they prevent wifi calling?
"Not enough talent" means "not enough talent for your shitty pay and/or horrible work conditions".

I spent my first ~5 years at Google working in C++. Google didn't seem to have a problem finding enough C++ folks whose C++ skill is basically "writes compilers and maintains a template library as a hobby" or "can explain a garbled stack trace in a crash dump". Also folks without prior C++ experience did reach this level while working there.
Wow, I didn't realize this was a common enough problem that someone had to write about it. I don't have any of those issues. I mean, I've had a few times where a call was dropped, but that's really rare.

One thing that really improved life for me was intentionally never setting up the voicemail on my current number. I am unable to accept voicemail. I've had it this way for 4 years now- I do not miss checking voicemail, and I'm not bothered by people unable to leave it. They can text or email.
There were trials, and there aren't 10 billion people.
I think the jury is out on which programming paradigm is easier to teach to kindergarten aged children.

Let alone adults with no prior training with programming.

I don't believe it's as natural as you seem to think.
> It's gotten so bad I just don't answer my phone unless it's a call from someone I know

In my case 90% of time people I know call over WhatsApp or other Voip calls.

Whereas 100% of phone calls from 'critical strangers' are over phone. 'Critical strangers' are delivery persons or cab drivers or courier or office colleagues... those who are calling to find out my whereabouts (critical in that context).