skysight-inc/HackerNews huggingface dataset:
I share some rationale here: https://twitter.com/tobi/status/1674065759754936327

> The web is one of the most amazing and unlikely products of humanity. Free and deeply egalitarian. No app store would allow the web to launch today.

> But it's a gargantuan task to build a new browser from scratch, and there are few people with the range of skills to pull it off. Andreas is one of the few and we are lucky that he can focus on such a task.

> I think of Shopify as one of the 'killer apps' of the open web. Not unlike office to windows, visicalc to the apple2 or half-life to steam. As such, we love to support open source that makes the web better. This is why we support Rails, Remix, and now Ladybird. (and many many others)
Yeah, I think people who are absolute about E2EE here need to remember the xkcd about the person with the wrench. Apple's reading of the tea leaves is that the government will be the one with the wrench and will ban E2EE. This was an attempt to head it off. Of course their reading could be wrong, and the government would ban anyway. Or maybe a ban never comes to fruition. I have to imagine it would ultimately end up at SCOTUS.
I still miss tasks, five plus years later.
Curious people are allowed some latitude when historical performance predicts future outcomes [1]. This is "not the first rodeo" as it were. Agree being antagonistic is not welcome, but it should not be unwelcome to ask hard questions about how something won't end up the same.

I like the Fly.io folks! But asking questions should never be off the table; how else would you be curious?

[1] https://ourincrediblejourney.tumblr.com/

(it is unfortunate that something with so much value and enjoyment like HN is a product of an investment firm, but a component of life is compromise; enjoy it like you would a public good while it lasts)
I don't know... wouldn't a minimalist want to prolong the lifetime of their fewer possessions?
This article seems to be mainly about larger air conditioning systems, whole house units or industrial ones, which is great, higher efficiency would be useful there. I'd also like to see some improvements in low cost window air conditioners. The only brand I know of that has tried to improve efficiency is Midea which sells inverter based air conditioners. It would be nice if they added a HEPA air filter, a heat exchanger to bring in fresh air with little energy loss, and if they kept mold out instead of encouraging it. We know air quality has a big impact on life and filtered air can reduce airborne diseases and reduce mold, allergens, and the need to dust off everything periodically. There has been little change in window air conditioners for decades, seems like an area that is ripe for disruption, and with efficiency improvements they would help reduce load on the grid and cost less to run. Also there is no reason a window unit can not be a heat pump and do efficient heating as well as cooling.
Can your elaborate on your trigger here?

Was it someone daring to suggest that molesting a 3 year old is actually bad, like really bad?
yes. any cheap low power usage display would do.
Local NVMe makes this a much more fun project than it would have been 10 years ago.
Current company, Auth0. Personal projects, Facebook
it is not the person, it is a system of systems
So like which products do you use, then?
Ask HN: Captcha vs. AI in 2023?
With the advancements in ML/AI tech - which I assume will be great at solving captchas. Will there be any good solutions going forward?
> My new heuristic is that I avoid every single company that raises venture funding.

What about posting on a forum owned and operated by a venture firm?

Do you use Google? Slack? Facebook? The list of venture backed tech firms is endless.

I don't even disagree with the general sentiment...but your resolution seems particularly short-sighted.
I’d also add:

— If you’re using JSON to pass around monetary quantities (eg. from the frontend to the backend), put them in strings as opposed to the native number type. You never know what the serializers and deserializers across languages will do to your numbers (round them, truncate them etc.).

— Start recording the currency of the transactions as early as possible. It can be a separate column in your table.

— Use TIMESTAMPTZ. Always.
Many of the best physicists I guess argue for fairies as well. In the context of many US government military officers and senators confirming evidence of fairy like vehicles.
That alone won't fix the issue. Also, what about fertilizer?
It's one of the things that are infuriating for technical folks but meh for everybody else.

In the days of programs taking forever to load or web pages downloading images slowly we knew what technical limitations were there.

Now we know how much sluggishness comes from cruft, downright hostility (tracking), sloppy developer work, etc.. we know this is a human problem and that angers us.

But for non-technical people it hasn't changed too much. Computing wasn't super pleasant 25 years ago and it's not now. Instead of waiting half a minute for Word to load they wait 4-5 seconds for Spotify to load. They were never interested in Notepad or Cmd or Paint. It doesn't bother them that now they open slower than in 1999.
Not even 14 jobs, there's only one (or two) open positions listed there.
Haha yeah for the past tax year I I looked at my transaction history and it was missing some that I expected to be there. Turns out, the exchange (Gemini, for crypto) uses UTC, but the IRS docs always tell you that a cutoff is relative to your own time zone.

The transactions were in the late evening on New Year's Eve, central US time, but that was already the next year by UTC, so any readout of "transactions for 2022" would not include them.

[1] e.g. https://www.irs.gov/taxtopics/tc301
I would think you would be making games with and without your engine as its being developed.
isn't a proto-pizza just foccacia with some stuff on top?
That’s what's so great about five year projections! Somehow it’s always worth it until reality comes knocking after the money’s been raised. Then it’s a mad scramble for ROI that debases everything that built the business.
> But most other groceries are cheaper in Canada than in the US. For example, the average cost of a loaf of bread in Canada is CAD3.50, in the US it's USD3.50, 33% more expensive.

I suspect this does not tell the whole story. Sticker price is one thing but how often does stuff go on on sale, what volume of coupons and other savings are readily available?

Maybe I'm completely off base here, but I've discussed this quite a bit with my friends who live in the states and overall they pay way less than I do for very similar items. And it's not some extreme couponing thing, it's just "these are buy one get one all the time", which is a rare occurrence here.
That's a hot take if ever I heard one.

There are many, many good reasons to have your own PKI that are not tech-debt related. PKI use-cases are not limited to internet-exposed server certificates.
I mean, I don't think that's exactly a fair comparison. These companies are focused a lot (and I mean a lot) more on enterprise software than your regular desktop software. I'm talking about Banking Systems, Automation Platforms, Government Software, stuff that has no use outside the corporate world. And they do genuinely do good work in these areas. Sure, they're not pioneers or doing some groundbreaking research, but they do their job and they do their job well (of course there are exceptions - but these aren't 100 billion dollar companies for nothing).
Big tech already knows more about kids than parents do.(1) If they want to protect kids on their platforms we don't even need to talk about end-to-end encryption yet. What would help is big tech sharing daily summaries of child on-device activity with parents. There are lots of parental control apps that do this, and yet they have had to fight Apple for permission to operate.(2) Parents don't want their kids abused either. We can definitely find a win-win situation here if we work at it.

References:
(1) https://www.forbes.com/sites/kashmirhill/2012/02/16/how-targ...
(2) https://www.kaspersky.com/blog/apple-fas-complaint/26017/
Notice that in this sub-topic we're talking more generally about causes for low-quality software -- laggy UIs being only one of the symptoms.

Figma contributes by enabling UI designers to easily author interfaces which look allegedly beautiful but are complex to build, test and maintain.

And the resources burned on building such esthetically pleasant piles of barely usable software could find better use on making it simpler, faster and more focused on user actual functional and non-functional requirements (much of them taking place on the server-side) instead of sugaring their eyes by throwing tons of code on their clients
Ask HN: Zero Latency Text Editing
Yes, impossible, but how about absolutely minimal latency word processing? I'm highly sensitive to any lag at all. My go to notes manager, nvALT, works fine for smaller documents, but lags noticeably after just 2000 words or so. Other editors are noticeably laggy from the jump. It's not a hardware deficiency (I have a well spec'd 2021 MacBook Pro). I'm so frustrated by typing lag that I'd pay just about anything for a dedicated writing device or app if it could render my letters so fast I can't tell there's any gap at all. Suggestions?
It may be a VC forum, but it functions as a broad technical forum. How many posts here are explicitly about startup economics?

It's important to remind people in the broader technical community that financial success should not the only goal, nor should it be required to maximize profit at the expense of customers.
The praise of Go didn't end with it being just readable, but also 'brutally pragmatic' and all that.

If Googlers think that Rust code is just as readable as Go, even though Rust obviously makes tradeoffs against readability for other features, I would be tempted to mark that as Googlers just having a culture about being overeager to think the tools they are using are the best.
With a subpoena they can access anything unencrypted. If a user turns on advance data protection, they cannot.
Spam LinkedIn connections
As others have mentioned, there is a long list of sudo CVEs that are unrelated to memory safety. I didn't see it mentioned in the article, but I hope that they have mined the CVEs for tests to ensure they don't accidentally reintroduce a known vulnerability. I was also surprised to see no mention of tests originally written for ogsudo, surely there are some?

Overall, I appreciate the rewrite-it-in-rust 'movement', I think it is an excellent learning opportunity for people who may not otherwise bother with learning the details of the foundations of our modern systems. And, as in this case, taking a detailed look at the original can improve the original.
It definitely would have seemed ridiculous to me before I took a heroic dose of psychedelics. Now, it seems ridiculous to rule it out.
Thank god some ISPs allow deploying your own fiber routers both residential and commercial after the ONT.
I don’t get it. Most of the examples if not all can just be set to a constant. You should not be auto-tuning the congestion control algorithm selection at runtime.
Not really. I’ve never worked for a studio that treats people like that, and wouldn’t. And I’ve been in a unique position to see how these situations unfold. It is very complex, very fluid, and difficult to manage. I think the bottom line is just that it is too difficult to do correctly for most studios (people).

However, you are correct in that people in my position are often at fault - but executive leadership ALWAYS signs off.

The labor shortage situation has changed a lot since then but it was never a wages problem. I knew people at studios offering double their standard rate who still couldn’t find enough qualified people.
I don't think Canada replacing its native workforce with H1Bs who got purged from jobs in the US will do much, if anything, to change the problems in the US. H1B staff are so entrenched now in companies like Mastercard, Chase, Citi, BofA, etc that they are the ones that do the technical screening and interviews. As long as those companies can easily get fresh approvals for H1bs (and they give lots of money to elected officials to retain that privilege), the only "qualified" people these H1B screeners will pass are other H1bs.
Shit, I wish I read this prior to my interviews at Cash App.
I think It's actually quite a beneficial pattern for the likes of the consumer and the founders.

Say Fly will eventually get acquired or IPO, their founders will justify it that they could use that money to work on Fly's mission statement or if they've had their fill of servers go on to build further startups in Fusion, AI, or Space Technologies or even give to charity (take your pick).

When they do get acquired/IPO the natural bureaucracy of large organisations and shift in incentives will set in (we've been here before with Heroku/Salesforce and SendGrid/Twilio...) and they'll become slow, more risk-averse, and ultimately less innovative catering for enterprise and other large businesses (where the easy corporate money is at) instead of scrappy startups and curious hackers.

This is where Fly 2.0 comes in 5 years down the line reaching No. 1 on Hacker New, where utilising the latest technology they'll create a completely new and innovative solution that will solve the current problem even better than now and they'll start by catering for startups and hackers until they themselves get acquired/IPO.

This doesn't mean it's necessarily a bad thing - founders get a chance to cash out, consumers get cycles of new innovation.
What is old is new again. We started off with mainframes, moved to PCs, and now all autonomy will be yanked back from us.
It won't work out that way. When the real-estate owners default on their loans (or sell the buildings for what they can get to avoid that fate), the price of renting office space will drop. That in turn will remove some of the incentive for companies to go office-less.

What will hopefully happen, though, is that most companies will re-evaluate whether offices really benefit them. Those that it does benefit will continue to have them. (Also some creatures of habit, but those will hopefully either be few or be out-competed by rational firms.)
> Investors didn't like to see people sit, chat and drink coffee

I do believe that the "workers must be uncomfortable all the time" mentality drives a ton of inefficiency. When my son was born, my wife worked from home, but we still needed a nanny to watch him most of the time so my wife could work. So we hired a teenage girl to come over and keep an eye on him for $10/hour. He was a baby, so it was pretty easy work - she spent most of the time watching TV. My wife complained that she was paying somebody $10/hour to just watch TV and insisted that she spend time cleaning instead. Well, she ended up leaving and we had a hell of a tough time replacing her - I said, "why do you care what she does as long as she gets her job (making sure our son doesn't die) gets done?" But she was adamant that if she was paying somebody, it had to look like "work" to her.

I spent six years in college practicing the fine art of reading books and regurgitating their contents back in various contexts so that I could qualify for a job where any time spent reading anything is prohibited because it doesn't look like "measurable" work.
Glancing through his work, he suggests that identity politics is anti-collective because it's focused on the individual and not the group. I can't speak more to that, I just was interested in what the underlying politics were from the above comment, because derision towards "liberals" is usually a right wing position, but obviously there are many leftists who have beef with some definition of liberals. They can all agree to hate the Atlantic and the NYT perhaps.
now I'm wondering if the "let's make Ladybird render Shopify better" video series was before or after that... :D
> Companies have only one stance - make more money.

That's not entirely correct, but close enough. Since that's a constant, we can ignore that. Outside of "make more money", different companies absolutely take different stances about things.

Most companies seem to have at least some amount of consistency in their stances, though.
I'm looking to deploy a $5/m DigitalOcean server (single binary) to run a simple HTTP[s] server, with persistent sqlite/fs and backed up via braindead rsync to my local system.

Is fly competitive with this? These sorts of calculations are always awkward for me with PaaS providers. I know what i'm getting with $5/m with DO, but with PaaS it often feels abstracted and sneaky. Heroku in my very, very old memory was a continual set of asterisks.. but i'm probably being unfair and PTSD'y.

Think i should give Fly a look? I at least find their SQLite features super interesting
Using diaries and journals as source material for zettelkasten notes
I’m not sure if we can call “pizza with toppings other than the strictly Italian defaults” as “trendy” anymore. Most Swedish pizzerias will happily make you a banana curry pizza, and it’ll be the one of the standard topping options on the menu. Is it a trend if it’s normal?

I think we (humans) have been putting different things on bread for as long as we’ve had bread, like GP said.
OneAPI is quite pleasant to work with, far more so than ROCm.
How many hundreds of thousands of lines of code do you think sudo is?

How many hundreds of thousands of lines of churn do you think happen per year in sudo?

If your answer is: What do you mean hundreds of thousands? That is the right question, but the wrong answer. The answers being around ~500,000 and on average ~200,000, including this year, respectively.

In contrast, OpenBSD doas, which exists to serve the same primary purpose of executing commands as a super user, clocks in somewhere around a few hundred to maybe 1 or 2 thousand lines total just eyeballing it.
He did receive credit and he was paid by ILM. He also became a visual effects supervisor. Maybe he feels he didn't receive enough of the credit compared to Dennis Muren and Phil Tippet, but he was also not in charge of the show. He did end up in many behind the scenes interviews. If anyone didn't get enough credit, it was probably the texture painters, lookdev artists, shader writers and lighters who actually made the dinosaurs look realistic.
Months are preferable to years approachong a decade, which is the current case due to regulatory and IP controls.
Uber doesn’t hold a candle to traditional taxis in terms of extractiveness.
Share a windows tool developed by me for testing HTTP requests:Post Emulator
Post Emulator is a lightweight windows tool for generating HTTP requests to test the response from server.
As noted by another thread, the Notepad example is surprisingly telling.

My initial gut was to blame the modern drawing primitives. I know that a lot of the old occlusion based ideas were somewhat cumbersome on the application, but they also made a lot of sense to scope down all of the work that an app had to do?

That said, seeing Notepad makes me think it is not the modern drawing primitives, but the modern application frameworks? Would be nice to see a trace of what all is happening in the first few seconds of starting these applications. My current imagination is that it is something akin to a full classpath scan of the system to find plugins that the application framework supported, but that all too many applications don't even use.

That is, used to, writing an application started with a "main" and you did everything to setup the window and what you wanted to show. Nowadays, you are as likely to have your main be offloaded to some logic that your framework provided, with you providing a ton of callbacks/entrypoints for the framework to come back to.
There are still areas in the USA that heat their homes with wood. I live near one, luckily just far enough away that I'm not sitting in the haze of smoke. I don't know how anyone can live in this town in the winter.

As for 2-storkes, I can't stand them, but they are still a necessary evil in many situations. I have gas and electric chainsaw. The electric doesn't compare in power and capability - but it is also my favorite, so I use it when I can. I love not smelling like 2-stroke exhaust, the electric always "starts" too. Then a larger tree dies or a dozen blow down at once and I have to break out the gas saw...
Similarly awful: those Giphy gifs that "writers" add to their business reports, content marketing etc. Never funny, always distracting. Try making your writing entertaining instead.
Having left DigitalOcean for Fly.io the DX is definitely an improvement. I don’t have any huge apps running there so can’t say how it scales but starting out has been super easy.
https://news.ycombinator.com/newsguidelines.html
Please respond to the strongest plausible interpretation of what someone says, not a weaker one that's easier to criticize. Assume good faith.
The Future of Knowledge Graphs in a World of Large Language Models [video]
hybrid works for some, but often means abandoning patterns that are required to make 100% remote work.

It's also a huge PITA since it requires people to live near their office -- can't move to rural Kentucky, still stuck in the burbs -- while simultaneously requiring them to maintain a at-home office AND work office.

Honestly if it's not 100% in person then make it 100% remote and learn to structure it that way. Otherwise it's the worst of both worlds.
I'm sorry but this is simply not true. Certificate Transparency logs ARE (meta?)data which would be exposed. If the certificates were meant to be reached externally, you wouldn't indeed care at all - but if they're for internal flows (e.g. App server to DB, 2 steps behind a balancer and a set of web frontends) you are indeed publishing stuff you would have rather kept private.

Before this (d)evolves into a zero trust, security-by-obscurity discussion - some auditors won't certify you in some edge cases related to this, and you may be operating in a regulated sector where such a certification is necessary. Just because it doesn't impact your use case, doesn't mean this is the case for someone else.
Yeah. I don’t support either subsidy. That’s consistency, which you lack.
> Can you please point me to each one of those?

By the magic of find-in-page:

1.9.5p2, CVE-2021-3156

1.8.26, CVE-2019-18634

1.6.6, CVE-2002-0184

1.8.0-to-1.9.12, CVE-2022-43995

I've not read into them in detail, but they are all overflow issues that other languages could have mitigated. Of course they may mitigate them by the task falling over at run-time, but that is “failing safer” than continuing with (potentially deliberately) corrupted data.

---------------------------------

I only spotted the extra details you added when I submitted my first reply (had the reply form open for a while due to work distractions):

> I am genuinely asking if memory safe languages could prevent this kind of issues, which represent the overwhelming majority of the issues reported on that specific page

That page is listing all issues in sudo logged in that database, from which the relevant data was summarised (basically the OP was citing his source). No claim was being made that increased built-in memory safety would prevent all the issues (or even many of them) in that list.
Congrats Kurt and the Fly team!!!!
I'm not that old and I remember a world that wasn't all single use plastics.

Paper bags at the supermarket, food came in glass or butcher paper, that kind of thing. We got along fine.
You can set both Chrome [1] and Firefox [2] to use Server Side Decorations (SSD) instead of Client Side Decorations (CSD), this will make it use the system title bar and frame like you want.

[1] https://askubuntu.com/questions/1365609/how-to-enable-system...

[2] https://linuxconfig.org/how-to-remove-firefox-title-bar-on-l... (this article is about how to disable it but the idea is the same)
How does Git fit with the rest of those?