skysight-inc/HackerNews huggingface dataset:
Except strncpy is broken for C strings, because it doesn't guarantee nul termination. So if you forget to force a termination on every use, you get buffer overruns.

Not only that, but (because of its actual purpose) it also fills the buffer with nuls, which is a complete waste of resources.

So yes, the original intent of strncpy() germane to the GPs comment, because it makes strncpy actively dangerous and complete shit when working with C strings.
https://web.archive.org/web/20221122110322/https://www.econo...

Non paywalled
> If it's too critical, wouldn't they send an email about it?

Usually no. I very rarely email software providers to complain about their software. I'll usually just uninstall.

Some software has more of a relationship with users than others. Doing support for B2B SaaS, I knew many of the users by name, and they knew me. Even then, though, some people would just live with terrible bugs for a long time.

We once had an issue where the initial page post login would take 30+ seconds to load because it synchronously calculated a bunch of their stats. I don't recall anyone writing in to complain, and when I fixed it, I don't think they said anything. (The slowdown was a boiled frog situation, since it got slower as they grew.)

Because it was a website, we could see the load time, and I saw it and fixed it, but if it were desktop software, the only way we'd have known would have been to load up a test account with hundreds of thousands of fake users and orders and fake shipments, and gone through the process of using the fake data in a real way.

Load testing is obviously good, but it will never beat being able to see how it performs for real users, and just hoping those real users will report back to you is completely unrealistic.

Don't get me wrong: I handled thousands of bug reports and feature requests during my time in support, and we got a lot of useful feedback. But insight into the actual performance is critical. Major bugs will go unreported for a long time. People just expect software to be buggy these days.
It's always the (usually quite bad) tooling, learning about platform/SDK shittiness and pitfalls, and figuring out which parts of the open-source library ecosystem you want to engage with, that takes like 90+% of the time getting decent with a new language, in my experience. Getting comfortable with the language per se takes low tens of hours at most, as you wrote.
> For an Apple product it's surprisingly open

Now try running 32-bit software :)
Ask HN: What software subscriptions do you pay for?
Most of my subscriptions relate to my software consulting business, but I think I would keep some even if I was an FTE at another company.

My subscriptions:

Github*
YouTube Premium*
Adobe CC*
Kinopio.club* -- used for personal brainstorming and to support the developers work
Freshbooks for invoicing
Gusto
Miro creating diagrams and presentations
Google Gsuite or whatever it's called
Slack

* Would keep outside consulting

Then there's stuff that's not strictly speak a subscription: AWS, DO, etc. I have an account with a bunch of infra providers
The approaches C and Rust projects have to upgrades are so radically different, it's comical:

curl: let's not rush, 23 years is not enough time for people to update their compilers.

Rust: the compiler released last Thursday is the oldest supported version.
While many players do lie in the game, the best players do so very infrequently because it destroys the trust they’ve built with other players - see e.g. interview with world champion here: https://www.popularmechanics.com/culture/gaming/a34043608/wi...

The agent generates plans for itself as well as for other players that could benefit them / that they are likely to do, and it tries to have discussions based on those plans. That is - it is conditioning its language model generations on its actual true plans, and does not have any features to create false messages. It doesn’t always follow through with what it previously discussed with a player because it may change its mind about what moves to make, but it does not intentionally lie in an effort to mislead opponents.
Fallout, and the particles captured in the belts are essentially the same thing from different sources. Yea it's not "blowing up" the field, it's dispersing the captured particles. The earth's magnetic field is not evenly, statically distributed. The lines of force could be seen as moving, they are not like in a fixed place. Captured particles set up an additional field which deflects more particles from coming through. Dispersing them means new particles can come through. For example, this deflection effect is thinner at the poles which is why more particles come through there, leading the the northern and southern lights. That's why during periods of high solar wind intensity such as solar storms, the lights sometimes occupy a much larger part of the sky and move closer to the equator.

If you read the whole wiki page, there is a more detailed explanation including simulations showing how it works. From the first paragraph, "Most of the particles that form the belts are thought to come from solar wind and other particles by cosmic rays. By trapping the solar wind, the magnetic field deflects those energetic particles and protects the atmosphere from destruction."
Not similar at all. If you are deciding between states/cities, then the states/cities’ debt burdens impact your tax liability and quality/quantity of government services received. NJ does not have the luxury of being able to print money.

Same situation on federal government level, but US apparently has quite a bit of advantage considering the strength of the currency. Theoretically, if there was a country similar to the US with less debt, then they would enjoy an advantage. In the US, that is not theory since there are many different comparable states.

Warren Buffett has commented as much

https://www.cnbc.com/2019/02/25/full-transcript-billionaire-...
I have completely lost any sense of trust in major media institutions after this. Seemingly every outlet accepted a ton of money from this guy, and in turn wrote very favorable articles about him. To me, there are two possibilities. Either all these outlets didn't do a minute of digging into where all his money came from, or they knew it was all a scam and took it anyway. So it was either a complete and total journalistic failure, or they were complicit in the fraud.

The mainstream media does not deserve the benefit of a doubt anymore. From this point forward, I am going to assume that anything published by the NYT, the post, the WSJ, any of them, is either purposefully misleading or just a bold-faced lie.

Does anyone have any good reasons why this is illogical? I really do not see a reason why we should think any of these people are trustworthy.

I've also seen the argument that this is just "run of the mill journalism", in that it's totally normal for an outlet to run puff pieces if they get paid to do so. But doesn't that completely undermine the integrity and trustworthiness of the outlet writing the pieces? If any rich guy can just buy positive press without any scrutiny, why should we give them our trust?

Journalism is supposed to be about digging up dirt on the rich and powerful so that us peons can get mad when they do bad stuff and make sure our government to punish them. This scandal is so massive because it involves journalists and government actors working together to make sure that didn't happen with SBF. How is anyone supposed to trust any of these people ever again?
Table partitioning and time travel queries: Seafowl case study
https://en.wikipedia.org/wiki/Little_Eichmanns
Good?

The "innovation" here was taking money from your customers, failing to account for it, and then losing it.
But it's not an str* function, it's an strn* function. And most (though not all, that would be too easy) work on fixed-size (hence the n) nul-padded strings.
I support two content creators on Patreon for $2/month.
(1) No evidence, (2) Zuck has a controlling interest in the company so he can keep the controls set for the heart of the sun and have a figurehead CEO take the hits.
My understanding is that the US is getting kicked out of Okinawa because of sex crimes over a long period of time. Guam would be the next closest airfield the US is guaranteed to fly out of.
I guess that is a point of view, but even from that perspective you can eat the fish.
That's the same as saying the CRM doesn't drive value, in which case we might ask why companies spend tens of millions of dollars customizing their CRMs? If you're the VP Of Sales, presumably you need some way to manage the sales pipeline, which is why you got Salesforce in the first place. But if your salespeople won't use it, then that's the same as not having it.
People were saying the same thing about Holmes and Theranos and yet here we are with her sentenced to 11 years. Sometimes prosecutors move slowly because they need time to build a solid case. Working quietly behind the scenes might look like inaction but I wouldn't be so quick to assume so.

Having politicians as friends only helps when one is not radioactive. Pulling strings can sweep minor problems under the rug but this is a giant problem, and I suspect SBF will find that all his donations won't buy him anything given his current predicament.
Ask HN: If the Big Tech are in trouble now, what will happen after the EU’s DSA?
They were concerned about the new European laws months ago, now that are announcing layoffs and bad balance sheets, will the EU’s DSA and DMA pose a real risk for the Big Tech at end of 2023?
We keep seeing the number 8$ billions of losses, but I wonder: does that number already include the enormous depreciation of Crypto which is taking place after SBF's demise?

What if users' possession on FTX are actually valued much less now?
> But that would be the big selling point as far as I'm concerned.

I mean, it's a trivially replicated function, you can just copy it over from an existing codebase. So it's not exactly a major feature.
I wouldnt invest in amazon, they are just another embarassing part of the .com bubble and will go under any minute now.
Show HN: Random Picker
Choose participants during an online meeting/spin the wheel of names, etc.
Any advice on landing page? Is it clear enough to know how to use it? Its free, works instantly, no logins or emails required.
An air purifier to help with some of the dust buildup.
Mycroft was the first thing I thought of when I read the first press releases from OpenAI about Whisper! Mycroft has historically used Google for voice recognition. Exciting to see self-hosted alternatives like Whisper coming out.
Why do you assume that private information was sent ? It could be something as simple as a "I crashed because of OoM" packet.

Not to mention that Firefox is open source, so you (and GDPR authorities) can check yourself what exactly is being sent...
I think the parent was asking if there's a separate family of abiotic amino acids in the upper atmosphere? Like from UV photochemistry stuff.

(I don't know the answer either)
Build it and they will come.

Build an environment that is an open invitation to scammers and bad actors and surprise, surprise, they will respond.
Western music has certain "rules" that our ears are used to. If the computer limits variation/random-ness to stay within those rules, it will sound at least "pleasant", as the bot won't let you drive outside the lines. However, the real artistry is knowing when and where to break the rules. A tune that sticks to all the rules risks sounding stale or ordinary. You gotta know where to spice and spike it to move to the next level.
Maybe we need some kind of higher level language that gets boiled down into assembly.
I apologize for my ignorance, still the concept is useless.
Unsure about a week stay, but if anyone is staying for 2 months or more, consider a furnished apartment by a company focusing on foreigners with long stays.

My 2BR furnished apartment was $1,500/month with 3 different subways nearby, 2 train stops away from Shinjuku. The company I used is Fontana and I can highly recommend.

When I visited three years back you could grab ready-to-eat food (by item or a pre-made lunch) from a supermarket for under $5. Japan can be very inexpensive.
maybe the thinking is tear it down to just bare bones and life support and then rebuild? Although, and I say this as a semi-fan, it's really exhausting trying to understand Musk heh.
> the acclamation period is measured in weeks

Ah, "acclimation" -- thought at first you were saying that Java devs love it for a few weeks and then hate it lol.
Whatever it is, it better not take up any space.
I've also seen a lot of benefit of grouping recurring meetings all in the same time slot daily. I.e. all team rituals from 10-11 am daily.
Wow. The effort here is amazing—sad Apple won’t provide for more assistance. If it wasn’t for this project, OpenBSD on Apple silicon (thank you kettenis@!) likely wouldn’t exist.
Synopsys’s What Apps Don’t Have Security Holes?
Ask HN: Why Spotify Helper consumes 90% of my CPU?
That is absurd! MP3 player waste 90% of the CPU resources of my Macbook Pro. Why do we tolerate such abuse from corporations and don't demand them to be more responsible?
Poll: Which IDE/text editor do you use?
*Vim (Vim, Neovim, LunarVim, ...)
> 7+ hours to spare

It only takes this long if you don't use a round timer and you don't allow shared victories. Even with new players we usually wrap up the game in 4-5 hours (people will start getting eliminated around hour 2 - so usually we have a "loser room" with other games and stuff to do).

You can also do it online with a turn a day (I ran an office Diplomacy League this way).

It's worth noting that you can play the game completely openly and honestly. We have had complete victories where the winner never once backstabbed anyone (he was just a very shrewd negotiator). It's just pretty rare because the more honest you are all game, the more reward you will get for a well placed backstab.
What does any of what you’ve written have to do with the concerns raised by the author of the article?
I used to build React components with inline CSS and everyone was going mad about my lack of ability; then I did the switch to tailwindcss and now I'm a top-tier frontender (/s-ish).
Wow, losing your job is already painful enough, but I can't even imagine the trauma of also facing losing the life you've built in this country on top of that. 90% of immigrant layoffs being H-1B holders is a staggering statistic.
At work I start off with 14 tabs, they're tools and references that I use every day.

At home I have several projects, I use TST (tree-style tabs), each project has a subtree. Sometimes I'll close off a tree, sometimes I'll save a tree to bookmark. An example tree was where I was investigating a problem with pdf files across some public resources (related to work), I had the principle sources for the PDFs, the PDFs themselves open, 6 tabs, then some searches looking for bug reports and each of those having child tabs of actual reports, then reference material raised through the bug report pages (gs and convert documentation). We're at about 20 tabs now -- meanwhile my console has at least 4 tabs open with gs and convert commands and man pages, I upload finding to gitlab (for reference when I'm at work) -- gitlab pages added to tab count. I test some pdf conversion commands, open a file manager (with its own tabs!) and open the results in the browser too. Midway one of the kids asks me about buying something, I switch to my Amazon tree of tabs, open a couple of searches and my basket, stack up some comparison prices in other tabs; one shop has several options where Amazon only has the one so I open them all and control-tab to do visual comparison; roughly +30 tabs, but I close off the tab trees that are poor prices or out-of-stock, down to about 10 tabs left until I make the actual purchase in ~10 days time.

I have a couple of hundred tabs open sometimes.

I don't find anything wrong with such a workflow.
A long lived feature branch is not a problem if you rebase it to master often. Move all refactoring to the beginning of the branch and merge them to master if they become too many.
Hail p4, g4, svn and blessed be their monotonically increasing revision number!
The infrastructure is almost non-existent because the vast majority of Americans don’t use bicycles to travel, not the other way around. There is not any sort of untapped well of demand in the American population to use bicycles to get around, outside of a very small and vocal activist minority who mostly already ride their bicycles in motor traffic already.

The Netherlands is an extremely dense, flat, temperate country, which is ideal for bicycles. The United States is none of those things. Bicycles predate automobiles by decades, but in the US they never even displaced horses or horse-drawn vehicles because even those are more practical than bicycles here.
How to rotate an actor with Raylib without math knowledge
> then why not just use memmove() instead of strncpy() if no-NUL is the goal?

no-nul is not the goal of strncpy, it's the effect of strncpy.

strncpy is designed to work on fixed-size, nul-padded strings. That's why it fills the destination buffer with nuls if the source is too short, and it doesn't guarantee nul-termination (if the source is exactly the size of the destination).
> there was no vision at all from no one

Completely agree.
I agree it's dumb and bad, but man, find something else to do with your mental energy.
>What do you make of the fact that banks can't unload Twitter debt for 60 cents on the dollar?

>They’ve reportedly received offers for as little as 60 cents on the dollar.

The article isn't saying the highest bid is 60cents/$. It's saying this was the lowest bid. Very weasel way to put it, intentionally trying to mislead. They seemingly got you.

>How do you define open and fair discussions?

I could probably put something together we would both agree upon. I'm largely speaking thinking about a university debate hall type thing.

-Unstructured
-anyone can speak for however long as they like.
-no rules government anything, turns, offtopic, or any constraints on the kind of speech.
-venue cannot impose restrictions.

>If Twitter becomes a one way shouting match for the far right, it's not really a discussion, more like RTLM. How do you think Twitter could actually facilitate open and fair discussions, or, if demoderating Twitter doesn't lead to them then it wasn't possible in the first place?

This isn't how twitter works. If you're being bombed on because you said something some group somewhere doesnt like. Then you should wonder why you're being bombed on. Then just get to blocking and muting people as needed.

Twitter regularly does have tons of open and fair discussions. The subjects may be boring or at least not controversial. So claiming twitter cannot have what it regularly has would be wrong. The better question is why the republicans seem so upset.
https://archive.ph/kalIC
other (maybe comment below)
Does it run like a 300Mhz 486 would or is the IPC so bad that the clock boost is all wasted compensating for silicon design limitations?
Djinn CI – open-source CI platform
As some people have pointed out, "dishevelled guy in tech t-shirt" is not an accident, it's a kind of work uniform as much as the business suit. You've got to look like a tech founder in order to raise money as a tech founder. As well as going to Stanford.
You can't generalise, and nobody really knows.
> There's a straightforward argument to make that he criminally defrauded Americans in the US

Is there? I thought the point of FTX was that it was offshore so that it could ignore american laws. I guess with FTX.us also collapsing he can be hit by those customers.
Author of Djinn CI here. This is a CI platform that I developed, it is open source but there is also a hosted offering https://about.djinn-ci.com. Some of the features are detailed below:

* Fully virtualized Linux VMs

* GitHub/GitLab integration

* Variable masking

* Configurable artifact cleanup limits

* Multi-repository builds

* Repeatable builds with cron jobs

* Custom QCOW2 images for builds

I've written some posts demonstrating the features of the platform which I have posted here before:

* https://blog.djinn-ci.com/showcase/2022/08/06/running-your-c...

* https://blog.djinn-ci.com/showcase/2022/08/16/using-multiple...

For further reading there is also the documentation sub-site at https://docs.djinn-ci.com/.

If you have any questions don't hesitate to reach out.
It's not so much that he was cozying up with them as it is that they were one of them. I think the reason SBF ultimately succeeded and disarmed investors' critical eyes is two-fold: he had a pedigree of Stanford/MIT and thus isn't a complete idiot so he could spin together a temporarily believable narrative even if they were on shoddy ground; the second and more important reason is that his parents were both Stanford professors and Caroline's dad was an econ professor at MIT, both the parents had a an expanding list of contacts which helped them secure the first critical set of funding rounds and further on had them ably play the dance with political players and regulatory bodies.

Anyway, the lesson I got after seeing SBF's philanthropic forays, which were all a ruse, was to never trust a techbro no matter how inspirational outwardly they may be. Ravening wolves they are the lot of them, in sheeps' clothings.
Disney's FastPass: A Complicated History (2021)
I occasionally make wine as a hobby.

This is actually the first year in a long time that I have a batch aging -- using wild grapes growing on my property. The first wine I ever made (from a kit), unbeknownst to me, needed to be aged to taste good. Once I learned that, I did the same test: every few months I'd open a bottle and taste it. After a year, most of the "tarry" flavors were gone, after 3 it was getting good. At five I really liked it. Unfortunately, no bottles survived to the 10-year mark, but I did learn to make wines that matured a lot faster!
The printf() family is much slower than direct string operations. snprintf() is not a good substitution when string copying is frequent.
Squash Compression Benchmark (compression algorithms benchmarks)
I completely agree. But when there are actual events that look like 'evidence' the meme becomes more easily transmissible, and more difficult to remove from the infected.

https://wearehostsformemes.com/
> Advice is supposed to convey information

> Great advice:

> "Never run a red light"

If conveying information is the goal, then that is crappy advice because it conveys no information. The information you're not conveying is that "running red lights adds significant risk of injury and death for both yourself and others because you cannot easily see cross traffic with enough time to save yourself and them."

This is not only informative about stopping at red lights but also about when it might be ok to go through them without enumerating every grain of sand on the beach.
Do you have a write up anywhere? This is exactly the setup I'm looking for. I have HAOS on a server, and I have a bunch of Raspberry Pis I'd like to run as satellites.

Ideally I can find a HAT with mics and speakers with sufficient quality/volume that I can build self-contained I/O devices for each room; the key really being that I want no more than a single power plug, and no more bulk than ~ a Pi + Housing.
JEP Draft: Value Objects
Now do number of users and geographic spread of business.
Ask HN: Has anyone tried to model the entire business world as a graph?
Node types being things like: companies, macro impacts (interest rates), value chain components (raw materials/trucking)
Edge types being things like: suppliers, buyers, competitors

What would be the ideal node types and edge relationships to model the business world in a way you can run simulations of events?

Has this already been done? Seems like it would be helpful.
The older I get, the more I appreciate a donation in my name.

That said, a nice bottle of booze is something I really appreciate but would never splurge on myself.