skysight-inc/HackerNews huggingface dataset:
From seeing links elsewhere on the internet, I believe the picture in this article: https://www.bbc.com/news/world-middle-east-64825526 is the correct one.
Canada is basically captive to (comparatively) small canadian oligopolies that each have their little fiefdoms. It's very hard for outsiders to compete (there are obvious exceptions like Walmart), or even impossible because of regulation. American companies try every once in a while because superficially the market looks attractive, but then retreat. Same happened with Target less than 10 years ago.
I do it for money and am not financially independent. My partner is the primary income earner in our household, and I would expect that she will retain that position for the foreseeable future.

Our goal is definitely that my contribution to our household economy grows to a more equal role, but she works an professional job and has been at it for a while and moved up over time.
Some people call that fraud
I think that would hurt startups much more. It will require that the degrees are accredited, which is a lot of work for both the institution that provides certification and for people applying

Secondly, a large percentage of developers do not have a CS degree. There's also a significant number of educations that are not specified as a CS degree, but still teach people skills with the aim of them entering the workforce to work as developers

It's also unclear how domains where software is developed as a tool, but isn't a primary focus (i.e. bioinformatics)
Who's they?
I would love legislation that mandated static typing for large/public companies (or any companies that took federal funding, etc). I think dynamic typing is one of the worst software engineering practices in common use today, and I'd like to see it go into the trash heap of history.

It's already happening with the massive adoption of Mypy/Pyre, the JS -> TS switch, etc.; but if we can use the power of government / the force of law to hurry up the extinction of dynamic typing as an industry practice, that would be a huge huge thing.

The next step after it would be requiring the nullability be an explicit part of the type (like in Kotlin, TypeScript, etc), or mandating the use of Optionals everywhere that nullability is needed in languages like Java.

The death of dynamic typing and default-nullability would probably save the industry society billions of dollars in the long run.
This is like someone swimming in an ocean asking for proof that water is wet.
You should see the remastered THX1148 for the VR future.
I think more so Rust than even Python on 2004 since Rust has a pretty steep learning curve and does require a non-trivial amount of dedication to learning it.
the production of knowledge is subject to power, Bill Gates has fundamentally altered medical research since his priorities decide where the funding goes. Universities require funding, academics need to eat, researchers outside of these institutions generally work for corporate-backed labs or thinktanks.
The themes in Her were already covered in scifi novels many times over. If they had already covered it, what was the point in Her?
If I remember correctly, it says that memory unsafety is not tolerated anymore, which is far the most important issue we have.

The ,,rewrite in Rust'' crowd was mocked here, but there are just too many cyber attacks with growing damage and targeting politicians in power that memory unsafe code shouldn't be accepted anymore.
libcompliance v2.0 was released. All corporations are required to upgrade by March 31. All requests to download older versions will be prosecuted.
Yep, that's why CEOs work less hours than the average American worker... Come on man, dont buy into the propaganda.
> EU already lacks big tech compared to US, China and Russia

US has next to zero privacy protections, and unlimited investor money with zero expectations for a company to ever turn profitable. E.g. all of YCombinator's "top companies" lose hundreds of millions and billions dollars a year.

China and Russia have cheap labor and yes, zero privacy.

Edit: the same people who clamor for Russia and China-style big companies will immediately shout for government to step in if any company ever gets to the size and influence of Yandex or AliBaba.
This is legitimate
We completely understand. We want to have the ability for Mathesar to gracefully handle DB users with different permissions (i.e. we'd disable features in the UI based on the permissions of the DB user set up during installation), but we couldn't get that done in time for launch. We'll continue working on this.
> (k) ensure that vulnerabilities can be addressed through security updates, including, where applicable, through automatic updates and the notification of available updates to users.

jwz was wrong: instead of being able to send mail, all software will now include its own networked update mechanism.
Well one reason is that bit operations are significantly faster than other methods, it’s one reason for example, why compilers will turn a divide by a constant into bit manipulation.

Using a scripting language’s string packing is hundreds of times slower than doing a couple of bit operations, and if there’s a memory allocation involved, it can be thousands of times slower. If you’re curious about this, I recommend doing some profiling to find out how fast your favorite algorithms are when using C bitwise operators compared to Ruby string packing.

FWIW, having the code be readable is mostly a familiarity problem that you can resolve by practicing more bitwise operations, if you want. If you spend your days in Ruby, then there might not be strong reasons to, but if you’re curious and want to improve, you might have fun playing in C or C++. I spend my days mostly in CUDA, and using bit manipulation is par for the course, failure to use the best tricks can result in much lower compute throughput and much higher power consumption.
> Many large companies are dependent on open-source libraries. With these regulations they now have (more) incentive to get bugs and vulnerabilities in their dependencies fixed

This is not what is going to happen, what is going to happen is that open source will be deemed a legal liability and every institution will turn to Microsoft proprietary solutions. Nobody is going to put more money into hiring people to fix bugs or vulnerabilities in open source projects.
Instead change your statement to "I see you're talking about cows, but I have thoughts on fields" and you'll better understand the relationship between the two.
More info in the FAQ https://news.ycombinator.com/newsfaq.html

> Another kind of job ad is reserved for YC-funded startups. These appear on the front page, but are not stories: they have no vote arrows, points, or comments. They begin part-way down and fall steadily. Only one is on the front page at a time. The rest are listed at jobs.
Good points but it’s worth clarifying that this is not what the Citizens United decision said. It clarified that the state couldn’t decide that the political speech of some corporations (Hillary the Movie produced by Citizens United) was illegal speech and speech from another corporation (Farenheit 9/11 by Dog Eat Dog films and Miramax) was allowed. Understood this way it seems obvious on free speech grounds, and in fact the ACLU filed an amicus brief on behalf of Citizens United because it was an obvious free speech issue. It’s clear that people don’t and shouldn’t lose their free speech rights when they come together in a group, and there is little distinction between a corporation and a non-profit in this regard. If political speech was restricted to individuals then it would mean that even many podcasts and YouTube channels would be in violation. It also calls into question how the state would classify news media vs other media.

The case has been so badly misrepresented and become something of a talisman.
Or they will pay the hackers and try to keep the breach a secret...
If by weird, you mean awesome. :)

But yes, it's an evolution on those kinds of game pads. Much more comfortable and adjustable, however.
Or, to put it another way, everyone has choices, but the choices of the poor are all bad.
Honestly, it feels like GPS is the great leveller here. Regardless of where you're from, whether there are addresses or not (or even streets, for that matter), you can always count on "am I getting closer to or further from the dot?"
It'd be funny to see C, C++, Java, PHP and friends outlawed.
Learning Rust, Ada or FP now seems like a good way to have job security in the EU in a couple years.

But who am I kidding, it'll be mandatory Java, Waterfall, and a metric ton of "Requirements analysis" documents for everybody.
It's a beautiful paper, even if the significance of sections is lost on me. Very clear and concise and beautiful illustrations. I learned a few things from it (I like how you describe planar trees as trees that can't be reflected about the y-axis).
Porter (YC S20) | Full Time | NYC - Onsite | https://porter.run

We're building a PaaS that runs in a user's own cloud (basically Heroku on k8s). We've converted some of Heroku's largest enterprise users as well as a large base of high-growth startups despite starting just a little over a year and a half ago.

We're still a team of six but we believe in 10x engineers and are looking to grow our in-person team in NYC.

Tech stack: Go, Typescript/React, Kubernetes, AWS

Open positions:

- Product Engineer: https://www.workatastartup.com/jobs/46166

- Backend Engineer (Go): https://www.workatastartup.com/jobs/44501

- Kubernetes Engineer: https://www.workatastartup.com/jobs/45970

Please apply through https://www.workatastartup.com/companies/porter
Secret Service, ICE Did Not Always Adhere to Cell-Site Simulator Statutes [pdf]
The NYPD does pretty regular publicity about taking these off the road. Which would be fine if they did anything at all about protecting vulnerable users from motor vehicles.

https://nyc.streetsblog.org/2021/11/29/nypd-seizes-illegal-m...

https://cleantechnica.com/2022/06/01/when-seconds-count-nypd...

https://www.nbcnewyork.com/news/the-nypds-new-efforts-to-pol...
What's the point? It's just an empty issue.
I quite like Droid-ify as a better front end for F-Droid, I don't even bother downloading the main client anymore.

https://f-droid.org/en/packages/com.looker.droidify/
Isn’t Bing made with GPT-4?
You're not thinking wrong. COBOL is, compared to modern languages, very straightforward. It's also very different, though, and so it can feel alien to programmers who only know the new stuff.
To add to what silentninja said, we are already deploying Mathesar without Docker on some test servers, we just need to document our setup. Coming soon!
My preference here would be for civil actions for damages rather than fines paid to bureaucrats.
for people who want to watch a video on white paint and cooling:

https://www.youtube.com/watch?v=5zW9_ztTiw8

https://www.youtube.com/watch?v=dNs_kNilSjk
I wish I have a use case for this as a web dev. I just haven’t found the need for this so Ill just forget this again
Uh, wut? "Agency" isn't magical omnipotence. There are always people in every country with interests and views that align with some foreign interest that is capable of bankrolling or otherwise supporting and making possible what previously was not.
The discussion a few days ago when Bloomberg addressed the conspiracy talk https://news.ycombinator.com/item?id=34966171
This one was cool.

Could you also extract iron from the bacteria?

EDIT: be sure to watch with the captions on, as the videographer explains what he is doing.
CalChris says >"I think Traditional Medicare with Plan G is slightly more expensive up front with no ballooning copays/insurance or..."<

What "ballooning copays/insurance" are you speaking of? FWIW we have Medicare Advantage from Kelsey-Seybold. I don't see any balloons in my future that aren't from China.

You are convinced regular Medicare + Medigap is better than Medicare Advantage. Why don't you show us an exhaustive list comparing the two instead of floating balloons past us one at a time to shoot down.

My MA plan with a single provider has been excellent. One of the best "advantages" is that my medical records are centralized and I have a true medical history going back 40 years in silicon (and on paper when I need it). When go into an ER they have it all there in front of them.

I'm open to change, but provide hard arguments and numbers, please.
I used to think that too, I don't believe it anymore. It will become increasingly painful to exit the EU, but there are long-term gains to be had.
https://archive.md/meIsv
Yeah...I know quite a few Cobol programmers. They make good, not extravagant, money. But they also have low job stress, no 'crunch mode'. Production changes are very carefully considered and controlled because of the consequences of botching one. No 'move fast and break things'. They're home with the family at a reasonable time every day. So it's a tradeoff, and a good one for many people.
> Normally you'd modify buffers after they've been acked at the application layer.

“Normally”, with select/poll/epoll/kqueue IO, it is entirely valid to allocate a buffer, put some data in, call send(), and immediately free it. With IOCP or io_uring or another completion mechanism, you ought to leave the buffer alone until the network stack reports completion. None of this has anything to do with SMB or other application layers — it’s how the network stack works.

With splice(), you don’t know when to discard the buffer. Even if you add application-layer acks, you are potentially vulnerable to a misbehaving peer that acks too early. For example, if you spliced from memory (using an mmapped, file-based heap, although I don’t know why one would do this):

malloc() (from mmapped space)

fill in buffer

splice to pipe then splice to socket

wait for application layer ack

free

If the ack is a lie, you have a use-after-free.
Good in-depth walkthrough of Prometheus internals.

The CloudFlare specific part seems to be a couple notable extra limits they've placed on their instances.
I spend most of my time waiting on IO, something like C++ isn't going to improve my performance much. If C++ takes 1ms to transform data and my Python code takes 10ms, it's not much of a win for me when I'm waiting 100ms for IO.

With Python I can write and test on a Mac or Windows and easily deploy on Linux. I can iterate quickly and if I really need "performance" I can throw bigger or more VPSes at the problem with little extra cognitive load.

I do not have anywhere near the same flexibility and low cognitive load with C++. The better performance is nice but for almost everything I do day to day completely unnecessary and not worth the effort. My case isn't all cases, C++ (or whatever compiled language you pick) will be a win for some people but not for me.
Reminds me of the Japanese https://en.wikipedia.org/wiki/Chind%C5%8Dgu
What alternatives do folks use?
There are a million things to say here, and many have said them better than I can. But there's an important generational aspect to the discussion.

I learned Emacs in 1988 or so. Only a couple years before, I had traded my Commodore 64---on which I did real work, like writing term papers---for an IBM PC XT clone. WordPerfect. Hobbyist BBSer, but networking was in the future.

When I got to college, Unix and Emacs were a revelation. This is how it's supposed to work! And the background ASSUMPTION that you could understand everything, and control everything, was something nobody at the time would have questioned. With hindsight it turns out that understanding everything was a mirage and controlling everything was the gateway drug to possibly literal addictive behaviors, but that was the ethos.

I left CS after only a couple semesters, and my career has completely diverged from it. So it's a TOTAL FLUKE that today I can comprehend---god, the whole model! of a Lisp machine! of Lisp at all! For a young person starting with modern tools? Maybe we can agree that we all see the big chasm....

But I will never give it up.
> The story of Ruby is altogether different: they made the fatal mistake of not defining a C foreign function interface in the standard, otherwise I imagine we'd be seeing numerical computation and ML libraries with a Ruby interface today.

This to me is extremely plausible, and sad.
Is Instagram blocking VPNs? I can't see any images
You didn't read the article, right? Go check it out, it brings up some good points. There's definitely stuff in that Act that's more than "absolute minimum legal standards", some even impossible to achieve.
The series of claims is very simple:

The single biggest genetic difference among humans is the presence of a Y chromosome.

This single casual factor, not "testosterone levels" nor "height" nor "bone density" nor "muscle mass", is the best factor to split on.

Accordingly, the women's division at the Olympics should be based on this factor.

(There are potentially still edge cases, but neither trans people nor even the "46X,Y DSD" individuals mentioned above are the edge cases.)
The UK did not object to the GDPR. The cookie banners are not a consequence of the GDPR, they are a consequence of companies using personal information without the users knowledge. The banners are not required at all, as long as you don't keep or used personal data other than for limited allowed technical/security reasons and you have a page somewhere on your site explaining that. There's certainly no need to ask permission from users to do things.
It's very hard to believe you. Comparing life under a dictatorship with somebody asking to change an icon without having any power to impose their will.
> Norway's sovereign wealth fund is a strategy to escape the resource curse.

Alaska has the Permanent Fund for much the same reason.

https://en.wikipedia.org/wiki/Alaska_Permanent_Fund
Do you ever wonder how Ruby's pack and unpack are implemented?

https://github.com/ruby/ruby/blob/4ce642620f10ae18171b41e166...
You can’t parse CSV with a regular expression
Regular expressions are a very useful tool in a programmer’s toolbox. But they can’t do everything. And one of the things they can’t do is to reliably parse CSV (comma separated value) files. This is because a regular expression doesn’t store state. You need a state machine (or something equivalent) to parse a CSV file.
And thus become useless, since people using splice for performance likely use some form of non blocking IO.

edit: it also works poorly for blocking IO: one doesn’t splice from a file to a socket — one splices from a file to a pipe and then to a socket. Which splice() call is supposed to block?
Not sure why this is here - I enjoy primitive tech's videos (often imitated, never duplicated - too many imitation channels have poorly-covered excavator tracks and chainsaw chips when the work crew and camera crew come in between cuts).

But before watching, be sure to enable subtitles for a description of what he's doing!
I would have gone with the small village in Germany! But yes, formal methods will likely be eclipsed by machine learning applications due to the investment in skills required and time consuming nature of the activities.
US DOJ warns of steeper penalties for firms that fall foul of messaging policies
Here is a new app that intends to address those exact issues.

https://github.com/jdavis2007/CukeBoard
You don't consult most people you know on things you'd consult with an specialist, but asking ChatGPT is portrayed as something closer to consulting with an specialist than to consulting someone on the street.
https://archive.is/bBqfR
Even the title says "No magnets"
On a laptop, i usually scroll while reading and use either the trackpad or a mouse scroll wheel to scroll. On the phone i tend to read the page and scroll as needed.
I find it fun to find random poop.cpp~ from 5 years ago in some random place on the filesystem. It's like discovering buried treasure. Who knows what's in there? Could be anything!
It's a good (and very nuanced) read

But again, it seems people are overreacting (not the author). Yes, I think the warnings are valid, especially for the perception

You might go and check how many companies did get those 10Mi euro "scary" GDPR fines before panicking again. Did any of the 'we value your privacy (not)' popups get big fines?

> Products with digital elements shall be delivered without any known exploitable vulnerabilities;

This sound more like the equivalent of not releasing a Digital Ford Pinto than an Inquisition tribunal on open source developers

> In terms of liabilities, it is not clear where those lie. Are the opportunities for that ’exhausted’ (a legal term) when you hit the vendor who marketed the product? Or could the author of an open source security library be exposed to bugs shipped by a vendor of IP cameras?

> We really should know, but it appears that we don’t.

Yeah this seems to be the main detail
Here’s an application that intends to address those exact concerns

https://github.com/jdavis2007/CukeBoard
I am continually surprised by how much that comment resonates with other programmers. I'm glad it brings you some joy and provides the idea of a different path should you decide to make a career change.

Since HN has a lot of Bay Area folks, I feel that I should mention that The Krenov School[0] is but a short drive up the coast from you lot. I haven't been, but the student work I see from there on Instagram is a source of inspiration to me.

[0] https://thekrenovschool.org/
Got it - so my original supposition is correct that were really trying to reduce (A) dependence on rare earths which will (B) give us more direct control on pricing in the long run. The trade off with that is that we have a lower overall efficiency of use.
Java programmer, recently switched to using Python in the job - This exactly is it. Sane defaults is the killer feature of Python.
Working software in a place that isn't mainly software is actually really great. I write the internal systems and occasionally work on the customer-facing websites and applications at a small local manufacturing company. Definitely better than my first job in RPA where I was constantly on a call with an uptight customer that gave vague descriptions of what they wanted, that then got upset when they had to call us 4 more times to fix what we built to their bad description. And it was nonstop crunch. No slowdown time in between customers and implementations. Just immediately on to the next one. Definitely painful.
There needs to be a carve-out for open source software. The difference between open source software and other industries is that OSS is not "the bridge" -- it's the "blueprint for the bridge". Until it's in the process of getting deployed, it shouldn't be subject to fines or audits.
I think the difference in how government enforces regulations is very different between the EU and US

Overall I don't think EU will go after smaller projects, since that would hurt the economy in an undesirable way. I think it's more likely that they'll use this to go after bigger corporations since that's an actual security risks for member states

That's also why there's a statement about proportionality in the proposal. The more critical the software is, the more you'll need to ensure safety
Conductive metals does not necessarily also mean magnetic. Aluminium is just one example, conductive but not magnetic.
US Treasury Introduces CBDC Working Group, Discusses Routes for Digital Dollar
So no government services were privatized? That is the topic at hand.
maintenance and road wear are clear winners for bikes being cheaper.

Healthcare burden, I'm not so sure. Even with the massive difference in usage, street car tracks in Seattle cause a lot more healthcare burden to bikers (and pedestrians) than car drivers. There's certainly a benefit from exercise, but bicycling also has more exposure to injury during use, and not all of them are superficial injuries. Add in things like poor form inducing nerve injuries and it looks even worse.