skysight-inc/HackerNews huggingface dataset:
> taking risk that might lead to failure is a no go.

For certain personality types. Let's say with some high conviction, the typical technology / engineering personality is already highly risk adverse.

Thus - they need all the risk avoidance as possible. Entrepreneurship is a risk game. It is defined by risk; those that won't start without safety nets will probably never start at all.

I know enough family men who built startups for years with young kids - earning nothing. It's not the situation, it's the person.
Replying to myself: An associate of mine is a federal criminal lawyer in SDNY. He said that he's sure the source of funds was cleared.

This makes me all the more curious.
I think there is always a danger, for every language, when you install a 3rd party dependency from a package repoitory. But usually this is restricted to the runtime of the application that uses the 3rd party library (and maybe, depending on the language, the code-paths that are executed).

That's a difficult enough problem to deal with already, but with Python, it's possible to execute code at install time of such a 3rd party library (basically, when you do a 'pip install stuff'). So, you might never have run the application you installed, but you'd still have executed whatever malware was hiding. This is not the case for a lot of other languages. Also, Python allows the execution of code when you have an `import stuff` statement, which is also not the case in other languages, often. But this is not directly related to this, just another 'Python-specific' attack vector.
The only PCI DSS requirement I couldn’t quickly align to NIST and others has been the 90 day expiration. My go-to has been to convince the insurance underwriters first of the primacy of SANS, NIST, Microsoft and so on. Then put them in a locked cage match with the PCI DSS auditors and accept the result when they walk out. PCI DSS auditors can’t accept liability shifting onto them, and cybersecurity insurance underwriters are getting more savvy on current standards and can often twist auditor arms enough to carve out exceptions and still obtain the audit certification.

It’s still messy at this time, but if it is important enough to you, then sometimes it can be obtained. Most of my clients aren’t that doctrinaire over the expiration part though and are still comfortable making everyone change every 90 days, and with some enterprises they don’t care because they have FIDO2/U2F or similar authN infrastructures and corresponding authZ improvements on their roadmaps within the next 3-5 years anyways that do away with most passwords in their environments.
Just like C, there is a stark beauty to the original K&R C Programming Language book. And there's an admirable clarity in the writing that has set the standard for all language manuals that have followed. It is, indeed, a terrific read. As long as you're not trying to learn C.

It's really out of date. It doesn't cover subsequent C standards; and it doesn't cover any of the best practices that have subsequently evolved to protect us from the things in C that are deeply awful (in retrospect) in the original. Or any of the evolved practical lore for writing good, portable, safe C code.
What would be the point of that things relationship with java though? Is it somehow important that the bytecode run by a tiny vm that is apparently distributed alongside could also run on a proper JVM?
I did exactly that! See [1] for my implementation of a telegram bot that is able to write and execute python code.

[1] https://github.com/thornewolf/gpt-3-execution
A ton of recent, modern, safe, efficient, and reliable cars lost internet connectivity in the last year.

https://www.toyota.com/audio-multimedia/support/3g-faq/

https://www.subaru.com/support/3g-network-retirement.html

Etc.
Yeah, I still have quiterss setup like that, but this is my alternative to doom scrolling Reddit/pop news sites. I use this Chrome extension and the feed mode to be more selective about my news. https://archive.is/
https://hackaday.com/blog/feed/

https://news.ycombinator.com/rss

https://api.quantamagazine.org/feed/

https://www.wowhead.com/news/rss/wotlk-classic

https://alerts.weather.gov/ (chose your region)

https://www.pine64.org/feed/

https://www.factorio.com/blog/rss
I have built my list up over time. Generally I will discover new stuff from hacker news or other aggregators (which I browse once I am caught up on my feeds). I add things to my list very often, but also am quick to unsubscribe if I'm not enjoying the content.

The types of content I tend to follow are:

- Videos. YouTube, Nebula, PeerTube and a few other sources.

- Blogs. These are mostly personal blogs that I have found interesting articles on. A few company blogs too.

- Social media searches. This is more for productivity but I follow a bunch of searches across various social media sites to stay up to date on specific topics.

- Comics

- Software releases.

I have very few high-volume sources. I much prefer quality content from hundreds of sources instead of frequent content from a few big sources like news sites.

I realize I didn't answer your question but that is sort of intended. Each person's favourite feeds will be different and depend on your interests. The best way to get stared is just to start subscribing to the things that you are enjoying today. Then over time you will build up a list of things that interest you. Especially when getting started it makes sense to over-subscribe, you can always prune down if you had a "false positive".
So much this is how the world turns.
Do the opposite of this blog post and you get Eclipse IDE
You say this but but VCs are still quite limited in their control until about series C. Literally all the founders I know who have raised over $1m have pretty good lifestyles (house, car, frequent travel). It's worlds apart from the bootstrappers I know who remain frugal despite being profitable
May I ask what your strategies are? What do you find works best?
I worked in the UK Civil service for a long while. The language barrier back in the late 1980s was a real thing[1]. While I had good English skills, I had never made it to university - unlike most of my colleagues. Oxbridge alumni were (still are?) over-represented, and the language I heard/had to learn felt very academic at times. Heck, when I started some of the Senior SC were still adding comments to minutes in Latin!

The Plain English campaign - whose work has been excellent over the decades - and diversity in CS hiring, have hopefully broken the worst parts of the language barrier.

[1] - silly example: while most of the office-working world would write a "memo", in CS Jargonese it was a "minute". To this day I have no idea why the distinction was important.
Meh. People love to hate on C but the invariants you have to keep track of are relatively simple (things like 0<=i<L.) Most languages replace these with multi-dimensional string based hashmaps that have much more complex invariants to keep track of and similar consequences for failing to do so.

Some languages like Rust and Haskell do a little better by having the compiler keep track of most of them (if you use it right) but the consequence of misunderstanding them here is accidentally coding yourself into a corner which is extremely unpleasant.

There are other things people like to talk about like automatic memory management and package management and again I'm not convinced these really improve much. The pain of allocating memory in C means people often find ways to avoid doing it altogether which results in much more predictable behavior. Same with pulling in third party libraries. It's rare using more than a couple is actually beneficial but when the package manager is there the temptation is way too much for most people and the result is both unpleasant and very vulnerable to supply chain attacks.

I'm still not convinced any of this is the improvement people think it is.
I will tell you from personal experience, a huge percent of doctors do it basically just for the money.

If you come from a lower to lower-middle class family, becoming a doctor might as well be becoming a billionaire. Many doctors don’t find out that other careers earn more money until they are already in or beyond residency.

I was in the process of applying to med school, thinking it was my best chance of joining the upper class in America, when I met an extremely wealthy man thru a friend. He gave me the advice “Doctor career is a trap for the middle class. Do something that scales better, and don’t worry about a guaranteed career path, you’ll figure it out as you go along”. It’s a bit dramatic but I think there was truth in it, and it added to the evidence I need to change my career
This does not compute.

To generate more, you need to interact with an environment, and you also need an objective function. If we could magically generate more textual data, then we have a language model already and don't need to train another language model.

You can't bootstrap a model for language synthesis unless you give it access to the internet to interact with users, at which point ... you have a Tay [1]

[1] https://en.wikipedia.org/wiki/Tay_(bot)
In the same vein of simplifying PGP, I wrote this little app a while ago:

https://prettyeasyprivacy.xyz

Basically a simple GUI on top of PGP. No CLI headache and is completely independent of OS. Encrypted sources follow PGP protocol so are completely backward compatible with CLI tools. Also supports both text and file encryption/decryption.

PGP impl uses proton's openPgp.js
This seems objectively false given that the majority of extremely successful startups are founded by first or second generation immigrants, who are often not well off.

https://nfap.com/wp-content/uploads/2022/07/2022-BILLION-DOL...
In the great US of A, corporations are people.
If you are in the US try your public library. Pretty much every one has one of two eLibrary applications with audiobooks included.

They may not have everything, but there’s been plenty for me. It has drastically cut my use of audible to the point that I’ve been canceled for two years.
Which further shows that musical proficiency trumps all technological advances. Anne Dudley's piano parts still resonate strongly with me, and I'm sure she had much to do with the arrangement of those presets.

Similarly, I've read that much of Underworld's first albums comes straight out of a Yamaha CS-1 which is a pretty basic rompler.
dang worship!
Generally they have a RSS icon along side the Twitter, Facebook, etc icons. It looks like a wi-fi symbol. They're also often linked in the footer.
You can always go for the high-risk, high-reward approach of demonstrating your stature by refusing to use the jargon by virtue of being too important to deal with it. Project confidence, do as you like, see how the dice roll.
I won't use any names but Smusshia helped get Donald Duck elected. What could Chmina do? How could they erode our society? The implications are enormous, and not even theoretical by this point. A lot of societal attack on us has already been documented.
In this model, people living in Bangladesh skip the “moving” part. They already live in a low cost locale.
> I don’t mean to be pedantic - I am honestly trying to understand. As a landowner myself (of publicly accessible spaces), if I were to be sued by someone I certainly wouldn’t want to be forced to extend hospitality to those suing me by allowing them onto my land for their own enjoyment. If technology allowed me to do this more efficiently, I’d utilize it if I felt that strongly about the merits of the case against me. But I am not a public company, so perhaps that’s where the issue is?

The nature and extent of this "private land" is at least part of the problem. This isn't some guy's living room or a small theater he built himself. MSG Entertainment Group owns venues all over the place. In New York, at least Madison Square Garden, the Beacon Theatre on Broadway, and this venue, Radio City Music Hall. Three of the largest and most historic venues in the city. Radio City Music Hall has been open since 1932, is an official New York City Landmark, and hosts the NFL Draft, Emmys, Grammys, Tonys, and VMAs, all globally-televised events. The Rockettes themselves are a national institution that has been around even longer than Radio City Music Hall.

You're effectively saying that the rights of James Dolan, a spoiled, petulant drug addict and alcoholic with a famously volatile temper, who happened to be lucky enough to be born to the founder of Cablevision and HBO, a daddy who could buy him things like Radio City Music Hall, is more important than the rights of the people of New York to take part in century-old community events that are part of the history and fabric of where they live.

One person is more important than millions because he happens to be richer.

Legally, you're right in most cases (maybe not this one because of the liquor license) that the rights of the owner are absolute. But should they be? What are the limits on what types of places a single person should be allowed to control? Imagine places that are currently public, like the Alamo, Central Park, Mt. Rushmore. If Texas, New York City, or the United States ever got so strapped for cash that they decided to sell those places to private owners, is it seriously now okay that some bratty rich kid whose daddy bought him a historical landmark can exclude anyone he wants for any reason?

What if one of the dancer's family members worked for this law firm? Now they can't come see their sister, mother, daughter perform because their employer's parent company is involved in a lawsuit against the Rockette's venue's parent company? The founders of our country went out of their way to enshrine and protect property rights because they were concerned about the past tendency of kings to just decide arbitrarily that your land was now under their control and you owed them more money than before or needed to send people to fight wars for them. It wasn't for shit like this. James Dolan is the shitty tyrant in this scenario. The Rockettes should get to say who gets to see them perform, not a global entertainment conglomerate that bought the venue they currently perform in.
Zuckerberg never has to pay taxes again (2013)
When there is no obvious UI option, you at least gotta try it!
From MSG's perspective the ban is about safety - albeit the safety of their own perceived attack surface from adversaries, not the safety of their customers. This is where they are twisting words to fit the "safety" narrative, and it is completely disingenuous IMO.
1) You cannot deploy C++ across different architectures/OSes without recompile.

2) VMs avoid crashes upon failures that cause a segmentation fault in native opcodes, with a VM you can keep the process from crashing AND get exact information where and how the problem occurred avoiding debug compiles with symbols and reproducing the error on your local computer.

Right now I use this with my C++ code to get somewhere near the feedback I get from Java (but it requires you to compile with debug): http://move.rupy.se/file/stack.txt

The question you really should ask is why are people using C++? Performance is only required in some parts of engines, to have a VM without GC on top should be default by now (50 years after C and 25 years after Java).
“can be done in a weekend”

RIP me who has spent 3 weeks on this

Great project for sure though!
Yeah, some of this just feels like advice some folks are going to have to learn first-hand, the hard, raw way. "Don't fall for parasocial bs touted on social media" is the new "make backups, seriously!111".
Truthfully I have never used RSS, beyond having to support it in a piece of software. I've never really understood the appeal and I've never been able to make it fit into my life.

Maybe I'm missing the point, I never read news or other such things, so perhaps there's just no use case for me.
I use the free version and for my needs it's fine (basically 100 feed limit and after a while old posts drop off the feed, I'm not sure how long).

For 25 dollars a year you get 500 feeds and one year retention (up to 1000 posts per feed) and you can pay more for a larger number of feeds.
Now all we need is Doom in Doom!
Accurately estimating the number of legal chess positions
#c on libera is a genuinely helpful place full of neckbeards.
No, that's the whole point (as far as I understand it): the manufacturers can't just throw it in a landfill, the law says they have to e.g. disassemble it and reuse or recycle the parts.
I had a coworker that would type in something random as his new password, then immediately fail to login three times in a row so his account would get locked. To fix this the sysadmin would reset the password, and allow you to choose a new password... and on the no-repeated-passwords policy did not apply to the magical reset dialog. So he would then reset it to his old password.
Makes sense, also I'm now sure that you'd be a good manager because you've demonstrated a deep understanding of the jargon.
Watched and subscribed. I also watched your Quake speedrun vid, really cool stuff!
Does that even fit on the spectrum? From Europe things like the "Stanford's guide to political correctness" feel super niche in the same way that some weirdos on the left used to advocate for getting rid of ages of consent.
“Paying people for results works very, very well in the private sector.”

Can you provide evidence of this? CEO compensation is a terrible model that encourages short term tricks like stock buybacks, front-loading revenue, and other tricks to garner short term performance. As for rank and file employees, measuring results is difficult … just like in schools.
I love using RSS to subscribe to blogs. Many of my favorite personal developer blogs have RSS feeds, and I have them on my blog. I'm currently using Readwise to get all my feeds in one place. This filters out a lot of noise prevalent in social media like Twitter.
Just fyi - there is an open bug to target wasm for Graal java compilation. https://github.com/oracle/graal/issues/3391

to a very large extent, it is open till LLVM upstream is more functionally complete to support GC.

wasm doesnt support GC to the way Java and Graal does. Which is why Graal is seriously impressive piece of tech.
so it is not wasm vs java. Because that is really apples verus oranges.

it is just a matter of time before java gets compiled to wasm. that's what makes me puzzled about this article. Maybe its really about rust or golang vs java.
“identify… …via profile photos on their firms’ own websites” - Time to obsfucate our profile pics.
This response makes no sense. Why would I spend my time on your specific project?

And I do contribute to open source, but I prefer to work on stuff that isn’t connected to some company.
The result of this will be millions of American teen girls learning how to "sideload" apps onto their device. Of course, a significant percentage of them will end up sideloading malware onto their device at the same time.

The funny aspect to me is that the senators pushing to "ban TikTok" are the same senators pushing for an "open App Store" bill. But I don't see how you can have it both ways.

Sure you can sanction TikTok. Are you going to jail every middle schooler who "does business" with them by downloading the app from unofficial sources?

Or perhaps you want to force ISPs to drop connections to TikTok servers?
ianal. There are conflicting interpretations of the agreement. This is from coindesk:

"The agreement states that if Ellison fully cooperates with the SDNY's investigation, as well as any other law enforcement agency designated by the office, she won't be further prosecuted criminally except for possible criminal tax violations with regard to the wire and commodity fraud charges that resulted from commingling funds between FTX and Alameda accounts. The deal does not guarantee that other agencies will not pursue prosecution at a later date."

https://www.coindesk.com/business/2022/12/22/caroline-elliso...

Different potential charges relating to taxes are on the table but that guilty plea to seven counts of felony carry no prison time. So it is "110 to 0 years" modulo potential tax related charges, if any.
Could they bundle it with some safety recall so it's a mandatory update (or else warranty void, insurance says you're at fault, etc)?
You might take a look at the OWASP Software Assurance Maturity Model (SAMM) for guidance on prescriptive activities you can take to improve your security posture over time. [1] There is a toolkit available that you can use to evaluate your team(s) and establish a phased roadmap. [2]

The data you gather from the assessment can help you prioritize activities for your team/org as well as provide metrics for your leadership.

You can also resource your activities with some of the OSS available from OWASP as well as join any of the projects/discussions to learn more. [3] Feel free to DM for more.

1. https://owaspsamm.org/
2. https://owaspsamm.org/assessment/
3. https://owasp.org/
One of those big difference between UK subtitling and US captioning is the use of colo(u)r or the absence of it (https://www.bbc.co.uk/accessibility/forproducts/guides/subti...), which I believe boils down to technological differences between television systems in the '80s. While the UK-developed teletext system is also available in NTSC (in fact CBC have deployed it), the US opted out to develope a separate captioning system that only supports basic text and positoning.

I'M NOT SURE IF THIS IS BECAUSE
OF GOOD OLD PROTECTIONISM OR
CONVERTING STATIONS TO HAVE A
TELETEXT COMPUTER ON EVERY
STATION IS IMPRACTICAL IN THE US
WHERE, AT THE TIME AT LEAST,
THERE ARE A DIVERSE NUMBER OF
BROADCASTERS WHICH MIGHT NOT
AFFORD THE EQUIPMENT NEEDED
SINCE TELETEXT IS AN "ACTIVE"
SYSTEM WHEREAS THE PBS-DEVE-
LOPED SYSTEM CAN BE USED ON
EXISTING, CAPTION-UNAWARE
SYSTEMS

... while the UK only had two broadcasters at the time, which are the BBC and the IBA (Independent Broadcasting Authority*), it is easier to develop and actually broadcast teletext.

* Despite their name suggesting that it only monitors broadcasts, they are actually the broadcaster which has the authority to install teletext equipment. The then-ITV companies are only program suppliers to the IBA, not broadcasters in their own right.
>But modern smartphones run full-fat kernels with non-deterministic scheduling, not an embedded RTOS.

I believe that is the beauty of it. Think something like the steamlink (streaming the video output of a steam game). Which turns into network transparent applications very quickly. Using a RTOS on the client side gives you amazing possibilities to lock the system down. Secure boot chains become a real possibility once you dont have to update that often due to the small attack vector. With NuttX having a simple framebuffer something like qubesOS but with remote VMs should be a real possibility. Especially since that is already happening with headunits in the automotive sector. Where one displayserver is handling both the safety critical tachometer as well as your multimedia stuff.

All of this not to mention, that the ARM processors in question dont have a secure coprocessor spying on you but Trustzone. This thread really gives me the warm and fuzzies. OP did something truly great here.
I'm not sure why you're getting downvoted. That's the logical next step from my OP.
But its not just an economic safety net that is required. (Although that's part of it). It's also the network of social connections, family connections and upbringing. A stable childhood and family life, I would argue, is probably even more important. In a lot of ways, welfare support (at least how its been done in USA) has driven a wedge into the stability of the family (by decreasing marriage incentives, removing the father from the home, removing incentives, etc.) Not everybody is born with the same ambitions as those that attend MIT.
Yes. I owned it during the 90th. The only problem is, that it is in German. Over at archive.org I only found torrent images for the enclosed CD-ROM, which features source code as well as a couple of great demos from Iguana, Dust, Surprise and others.