skysight-inc/HackerNews huggingface dataset:
Congrats, man!

We're also facing hard issues every now and then and then you face things like strong competition that can make you nervous at times (depending of the scale of your industry), but having suffered more personally in the past in this context, just helps to face these things today much easier.
I love this.

In particular because I was once very close to someone working in some UE-related organization in Brussels. They routinely complained about the EU having its own English, mentioning the use of "persons" where "people" would be more correct. This use is not mentioned in this publication, maybe "persons" is actually fine-ish.

I can see how many of these mistakes could come from the French language. Ah ah. Whoops. Sorry! :-) For instance, "foresee" used to mean "plan" where it really means "predict". I never made the mistake because I never made the connection myself, but in French "prévoir" indeed means both things.

I wonder how much French being used in Brussels has influenced this. But I guess many European languages are similar to French for many of these things.

Maybe some of these misuses are a testimony of the complexity of English, like the uncountable words, the prepositions or the usage rules of "allow".

Maybe English could adopt some of these uses that seem convenient. Like, "transpose" instead of "incorporate into".

And yes, I cringe a bit whenever I see "actually" used to mean "currently". It happens all the time.

I guess English has its peculiarities in each area where it is spoken, and Europe is not an exception to this…

And I mean, a big chunk of the English vocabulary is already French, we might as well continue the trend x)
Is this really worth an article?
The anti-debugging protection just stops executables using a list of hardcoded filenames (eg. Wireshark.exe).

This is neither interesting nor new and was already implemented 20 years ago by script kiddies.

What's next? A VBS Trojan that takes commands via Matrix instead of IRC?
https://en.m.wikipedia.org/wiki/Mark_I_Fire_Control_Computer
Is pretty cool analog computer
> Year of the Linux on the desktop might never come

I'm not even sure what that would mean practically. By brute market share, possibly not. But I've had Ubuntu as my personal daily driver for many years, and at the moment it's honestly just a much better experience than either Windows or macOS.

Microsoft and Apple seem to have turned their operating systems into advertising platforms for their other products, largely disregarding the basics of what makes a desktop actually work well.
Some government websites are intended for a specialist audience. I think it's great that the site for paying my car tax is very simple but I would not expect the instructions for using a government data API to be written in the same way.
I wouldn't call myself a security person, but I do have a fair amount of experience implementing things downstream of the security organization, and sometimes outside of that context.

I think a reasonable place to start is something like the NIST Cybersecurity standard. In my limited experience, the NIST Cybersecurity standard deals more with _risk_ than it does with discrete technical guidance, but from their fairly comprehensive risk framework you can start to frame the technical problems in your environment through this risk lens.

Additionally, I'll recommend something that's maybe wrong (security folks jump in as needed), but I typically try to work outwards in when securing an environment. In the case you've got a web app or something, reduce the attack surface of the system externally as much as possible (closing ports/IP filtering on management ports/etc) and then work your way inwards.

Put another way, try to focus on bang for you buck until you have a dedicated a team. An obscure XSS that requires a strong working knowledge of the system is _very bad_, but if you also have port 22/SSH open to the world with a 5 char password, I'd figure that one out first. That's obviously an extreme example, but I think you get the point.
You are not alone, Google and Meta are in that same desolate box.
You say your startup filled a valid need? Usually items like that get at least a look. That look has to make the user take the next step = +feedback to proceed. If he/she likes it they promulgate it. Ever see the old hair shampoo commercial, I told my friend, and she told to friends, and they told......screen full of faces.
The fact that you could not progress beyond ~~20 tells me that your App had no 'gain'. Your gunpowder is wet and you will have no explosions.
As to why? this is down to function/feel. If you had instructions that offended people on social/religious/gender grounds - any one of those are killers. Condescension in phrasing - a killer.
Apps need good ideas/coders/manual writers, often these are not embodied in one person. You write good code, but the manual is so badly written people toss it away and walk - same for a number of other aspects. A good app can need a team of several people, each filling a niche.
So analyse your app(s) and see if you can isolate the flaws. It may have a fatal flaw that killed it, or it could be you trying to be a one man band and doing a bad job in one or more aspects.
Now you look down on 'influencers' - AKA advertising or promotion. Their job is eyeballs, once you get eyeballs, you still need gain or traction among users that the influencer attracted to your App, or once the dancing stops, your users will trickle away..
It is much lower than Amazon. As of lately even lower than nVidia and AMD.
I suspect that HN users are uniquely moderateable in a way the general public isn’t.

I’d be very curious if Dang would agree that we’re more rational and more prone to accept course correction than normies, or conversely that we think we’re so smart that we’re harder to moderate than anybody else.
I like how you assume I have never worked for a MBB. Some of us don't smell our own farts, you know.

People view of how things work change drastically between their junior years, i.e. nearly students, and grade above manager where you start selling. I'm highly tempted to answer you: you will understand when you have grown up but that would be a touch condescending, wouldn't it?
Here's a profound realization. Utility is a function of both variables, time and money. Wholly unemployed people have plenty time but can't afford to spend the money using it how they want. So the situation is valueless. On the opposite extreme, people who spend every waking working have plenty of money but can't afford to spend a second using it how they want. So that situation is also valueless.

Based on nothing more than crudely assuming utility = time*money and then optimizing with simple calculus, you can get very close to deriving a 40 hour work week as the utility maximizing choice.
I believe GP's point was that this is just the current law, not some profound legal principle like property rights. That is, the law already deeply limits property rights for businesses open to the public in various ways (e.g. by forcing them to abide by anti-discrimination laws, which private property owners have no obligation to). Making a new law that would limit public businesses' ability to ban people based on legal disputes would not constitute a difference in kind (only in degree) compared to current laws.
One thing it’s important to remember is that there’s a big difference between recreational prose and documents which are important for a wide variety of people to easily understand. This is especially true when there are potential legal implications such as when a government staffer is giving instructions to a contractor or someone is telling citizens how to access public services. No, “tackle” probably isn’t going to be a showstopper but it’s also usually an incorrect metaphor so there’s little lost by saying precisely what you mean.
Here's an unpopular opinion: (i tweeted this a long time ago)

All the solopreneurs on #buildinpublic Twitter seem to be so successful and hard-working, but the reality is most of them are not making anything sustainable or good.

It feels like this community leans toward a shady and awkward Q&A show about how to grow your new venture. This show is the main engine of growth for some shady "bUsInESs" models on #buildinpublic. It's now a hype train for everything: truth, lie, scam, happiness, sadness, etc. And everyone is trying to use it:

Engage with broken founders, ask them about their opinion, tell them how good their ideas are, show off some fake numbers, feed them with productivity hacks, add more emojis , promote your "SaaS", and you'll "succeed".

I feel sad comparing what's happening rn with the way it was in the beginning, N years ago. It went from "sharing my journey" to "growth hacking my shady scheme" on twtr.
What do you believe TikTok “actually is”?
I assume that by "you" you mean "I"

From my perspective I am happy with the tradeoff of hanving gc pauses and not needing to manage memory manually.
US total government spending is officially 34% of total GDP, Germany is 43.7%. With much of that covering healthcare and collage education which more than makes up the difference for the median family. In the end, the US’s extreme defense spending and horrifically inefficient healthcare system is a massive drag on the economy.

What the US does differently from most of the EU is to hide as much spending as possible in the form of targeted tax breaks. From a cash flow perspective little changes but from a political standpoint it’s not spending.
I’m surprised nobody here has mention the end of year discounts they just started offering in various countries. Discounts like this are used to increase demand something Tesla hasn’t had to do in a long while. To the market that signals weakness. If it was localized to the US you could rationalize it that too many people are waiting until the new year when the new EV rebate kicks in, but they’re also doing the same thing in China, Mexico, and Canada.
I opted for Solr over ES due to the craziness of ES licensing, and other fiascos they have had over the years. Solr seems more "open" and in line with what I believe.

Sure, Solr is rough around the edges but it does virtually the same thing.
Well, to avoid in general. One thing I've notice in switching between working for companies and organizations from various regions is how management speak.

For instance:

Danish company: "We're doing great, here's how much we made last quarter". Or: "You fucked up, don't do that."

Norwegian company: "We be looking to aligning our pricing strategy using market benchmarks." "We'll be needing to conduct a behavioral correction session in the near future to ensure that you better understand your role in our organizational structure".

US company: .... I can't... you get a three page email with long words, no obvious structure to the text, only to make a single point. You're not really sure what that point was, even if you spend 45 minutes trying to parse the content.

Generally speaking, use fewer words, try not to communicate just because you think you must.
> chasing TikTok without realizing that gen Z isn’t using that either

So what is Gen Z using?
If the likely financial outcome were the same between making music and writing software for banks or insurance companies, I sure as hell wouldn't go anywhere near a computer.

Do you think people do Office Space style work out of the goodness of their own hearts?

> That’s frankly ridiculous.

The feeling is mutual.
Why is "Democrat vs Republican" relevant here, except as flamebait?
Wait, his kickstarter averaged over $200 per backer?? That's crazy. A $41 million kickstarter - my head is exploding.
I would strongly suggest you not use Nix for mission critical computing. It is suitable only for hobby use cases unless you are prepared to review 100% of all code yourself, because no one else is.

For robots you should not need more than a Linux kernel and a minimal init shim to your own custom runtime binary anyway.
1. Start thinking in terms of accepted risk. What is accepted risk? It's risk that you, evryone at the company, and its stakeholders are willing to accept failure because of.

For example, going out to buy milk at 3am inabrough neighborhood might not be accepted risk - the risk vs value is off.

To buy diapers in a 3am emergency? Yup.

To drive a car on the motorway is hella dangerous. Super risky when you think about it. But you can't not do it. (presumably/ So what do you do? You check your brakes, indicators, steering, etc bfore taking off. Get it to periodical checkups.

Then if it fails, you did your part, you did what you could. It's accepted risk.

It's at the point when you go "well, if I'm not gonna do that then I might as well stay in bed all day". You could get hit by a meteor going out your door you know.

If you declare something an accepted risk, accept no blame for it failing. it was accepted risk. not your falt that it happened, but it was you who decided that its accepted risk. It was your decision (but inform everyone). If you dont want to stand for the decision, defer it, or maybe you're in the wrong spot.

2. Then there is the concept of unknown unknowns. Talk to everybody in the company, make sure that noone sits on a domain or problem area you are totally unaware of. Survey/canvas the landscape, and report back to your superiors. Then drill down wherever necessary
The course is meant to be interactive, which means that you should try out the embedded code snippets. You can edit them and run them from your browser :) However, if you really want a PDF, then use the print page[1]. It will let you produce a ~210 page PDF with the entire course.

For learning Rust via a non-interactive medium, I recommend the Rust Book[2]. It has all the narrative that the course material is missing.

[1]: https://google.github.io/comprehensive-rust/print.html

[2]: https://doc.rust-lang.org/book/.
About 25 years ago, The Washington Post carried an item on Algebra I grades in the high schools of Montgomery County, Maryland. In the west of the county, one needed to score at or above 90% to get an A in Algebra. Mid-county the cutoff for an A was in the mid-70s. Assigning the kids randomly to teachers, across schools, is called "busing", which has never been popular among prosperous families--just the people likely to turn out at school board elections.

(Not that I don't see the appeal of your proposal.)
First document every "near-miss" or risk you find.

Go make the exact same argument to your CEO, $XX million start-up flatlines with a single slip up.

Make it as easy as possible for your CEO to go to the company board, repeat the argument, and make an ask to shareholders for a loan to hire a security expert. Your self taught experience will help in finding the right person.

Befriend the new security person and learn everything they have to share.
Makes me think of that "weird domain name"-based ransomware mitigation.

https://www.theverge.com/2017/5/13/15635050/wannacry-ransomw...
> For HTTP it felt a bit like cheating since I had to create directory listings in HTML which didn't feel pure. Also it only had read access.

There’s also WebDAV, which may be interesting to implement.

Although, I am not aware of any actually great WebDAV clients.

Only time I ever used WebDAV was a decade ago on my first smartphone, when I set up a WebDAV server on my computer and used a WebDAV client app on the phone to transfer files between the phone and the computer over WiFi.

WebDAV is one of those things where because I personally haven’t used it for so long it could be something that “no one” uses anymore in present day, or it could be that unbeknownst to me it’s hugely popular.
It's not for everyone, and yes there is some luck involved. Some luck in terms of timing, some in terms of how good your network is. Some ideas just aren't that good too.

I would say don't give up, at least on the general idea of entrepreneurship. If you have that drive, that is more of the equation than you think. Perhaps consider a more stable approach if your situation allows -- get another job and use moonlighting to see what ideas might take off. And keep in mind the saying: alone you go fast, together you go far.
Comparing private residences to public venues makes sense in a particular and limited sort of "technically correct" way, but is rarely the basis of a persuasive argument.
You're still status signalling, just in a different way.

When I wear a T-shirt from a Hackathon to a developer conference I'm signalling just as hard as the sales rep in the suit.
Great info, but how much is beer?
What do you suggest to buy genuine ones in the face of source commingling?
Imagine a dragon like sail for water streams, it runs below the surface in the stream, and allows you to milk the potential energy of the water toward a direction change for your boat..

https://en.wikipedia.org/wiki/Sailing_into_the_wind

But with the gulf stream and automated underwater dragging dragons
> I’ve made enough on this Kickstarter. I don’t need to squeeze people for every penny—but what I do want to do is find a way to provide options for authors.

This is a kind of sentiment I wish was not exceptional. People often talk about how one day they may have enough, and _then_ they'll help others -- but it's rare to see someone (especially with less than a billion dollars) say out loud that they did it, and in the same breath they start helping. (At a certain time, Kaladin wouldn't believe this kind of guy exists!)
Every person and company you just mentioned are infinitely more trustworthy than the CCP, and that's saying a lot.
Indeed. I hate to say it because I love Linux but Wine has genuinely been by far the most stable ABI on Linux.
Neat!

But wouldn't it more appropriate calling it Pico 3D Modeler, or such?
> why is Nix so popular right now?

Popular where? On HN, because it's functional, and people around here like functional, just as they like Emacs, for instance. It's not popular in the industry, as far as I can see (also, just like Emacs).
For the record, I like Nix (and also Emacs), but I would never introduce it in my team. The learning curve is very steep, and the problems that it solves are mostly handled "good enough" by Docker, which I actually dislike, but everyone and their dog know Docker, there's pretty much zero training for new hires needed, introducing Nix simply does not make any business sense. In a small startup team of like-minded functional programming people, sure, but in a large org? I just don't see it.
I've only got an N of one under my belt, but I'd also note I wasn't a founder or even a pre-series-A employee. I believe the former got more like what you're thinking, and the latter 2x or so what I did. Also I honestly can't recall if that was a pretax or post number at this point.

But on the other end of things... it was still a nice cap on my time there. And even if it's not quit-your-job money, it was still an Everest.

(An Everest being the amount of money it takes to climb Everest, buy a luxury car or a small cabin on a lake, or any other number of reasonably achievable dreams.)
"isms in my opinion, are not good.". --ferris Beuller

I find it interesting that you like to resolve conflict using passionate discussion. Some of my best friends are this way. I have always preferred to calmly put forward supporting evidence, taking turns like a card game. I always felt like allowing myself to become emotional when debating something meant I had lost. That is what my debate teachers said. But my friends felt if I wasn't passionate, I must not be invested in the conversation and had thus lost. It took a bit for us to understand each other. Particularly because I wasn't really invested in winning, just finding out which position was correct.
Crowd control is pretty demanding; I don't think you could throw a bar into the process without trashing your throughput.
> I also hate websites where they hide your password while typing it in. Who can enter a password like Xaa3$#%^&*JqUIx correctly while blind?

You may consider using a password manager[1] that allows to auto-fill the password field. Use xkcd-based passphrase[2] for the master password to make it easier to type.

[1]: just not LastPass with their regular security breaches. Personally, I recommend Bitwarden.

[2]: https://xkcd.com/936/
The term "Portal" was hijacked by the video game in 2007!

https://en.wikipedia.org/wiki/Portal_(video_game)
It's overstating the case to say that China has no oil or fossil gas. Yes, it imports a lot but there are oil fields both on-shore and off-shore. The largest field is Daqing, which, yes, produces less than a million barrels per day. Not nothing, though.

1. https://en.wikipedia.org/wiki/Category:Oil_fields_in_China
Yes, money maters.

Rich kids can conjure tens to hundreds of thousands of dollars from "friends and family" in a mater of days. Hours even, if they're really connected.

They can then pump all that money straight into advertisement, barely even need a working demo - just something that looks like a product. They can do this many times over.

If you're gonna bootstrap something with $0, then you need to win the algorithmic lottery, simple as that. And even if you have some life savings laying around, you only have one go at burning those - though most working class folks in their early 20s rarely have the substantial funds needed to promote a product.
I don’t know about the “year of…” but RSS readers are definitely the best option to consume information in a manner that leaves the individual with control, while being exposed to a broad range of thinking. And consuming content from a broad range of media.

I do hope 2023 becomes the year of the comeback of RSS.
Libraries have to pay a premiums for them, so it depends on the budget of your library. (Some may only buy if someone puts in a request for purchase & some may not have the budget to buy at all.)
> Why do people use password managers that store all the data on their own servers?

> sync your password database to DropBox, Google Drive, iCloud, etc.

So instead of storing it all on one service, store it on one out of three others?

Yes, you can set up your own hosting etc., but 1., will your average user do that, and 2., will they be able to maintain an adequate security posture of their self-hosted server?

Besides centralization being, as always, hard to avoid in practice, having a password-specific storage service also has several advantages over a generic "bucket of data" cloud drive.

For example, I'd expect a (competent) provider to invest some resources into

- Server-side deletion when I change my master password (cloud storage often keeps file versioning around for extended periods of time)

- Access logging, i.e. making sure that it is architecturally very hard to download my encrypted vault from an unknown device without triggering some sort of after-the-fact notification to me

- Limiting API and service attack surfaces, i.e. not offering their storage as part of a suite with other services that have different threat models, such as photo and video storage (accessible to backend batch jobs to rescale/reencode the media for multi-device viewing etc.), data sharing and others
If you can get a budget for a security consultant/auditor to help put the policies and frameworks together, including conducting a baseline audit and identifying gaps, that would be a start.

While IT aspects are a big part of the security (patches, vuln assessments, access control, environment separation etc.,) there are quite a few policy, documentation, review and controls and people aspects etc., that are important in any infosec framework.
Probably rsyncing a "production" tarball to a backup server, just like all of RISC-V's current "production" usage.
I just woke up so don’t feel like fact checking this. Is the population really that mentally challenged? Can you provide a reference to your statistic?

Changed “general population” to “population”

See, it already had an effect on my writing.
I find it pretty amazing their company has 60 employees. Also worth the read to learn about Audible pricing. I didn't know. I'm pretty addicted to audio books, but now will have to seek out other alternatives when I can.