skysight-inc/HackerNews huggingface dataset:
The problem with Java was flawed sandbox implementation. Every month there was escape sandbox vulnerability. People didn't keep their JVMs up to date. Installing JVM plugin for browser, between x86, amd64 Edge, IE, with multiple JVMs on the machine, was a holy mess.

So in the end it was security nightmare.

Jobs finally killed it, by declining to support Java on iPhones. So from that point it was doomed.

WASM is part of the browser. Browser vendors figured out how to keep their browsers evergreen. You don't need to install anything, it just works. It works on iPhones.

So, yes, idea was the same, but implementation was actually good and supported by everyone.
> I think applet was the first tag removed.

<applet> was never removed from HTML, but it was deprecated by HTML4.01 - but only because they wanted to use <object> as a single replacement element: https://www.w3.org/TR/html401/struct/objects.html#h-13.4

Looks like <applet> was officially obsoleted sometime during the switch from HTML4.01 to the Living Specification version: https://html.spec.whatwg.org/multipage/obsolete.html#other-e... - but the spec still permits using <object> or <embed> for Java applets: https://html.spec.whatwg.org/multipage/iframe-embed-object.h...
>News flash: technical worker thinks more resources should be diverted from non-technical matters to technical matters.

Good one, but that's not my point just to be clear! I think this kind of documentation tends to happen in organisations that already spend so much on enterprise licences that a team of designers doing "graphical profile" work for a year is almost a rounding error, and I don't mind that it happens at all. It's just weird that it happens to such an extent around typefaces, of all things.

Large corps pay dearly for Dell servers, kubernetes solutions from IBM, even the HR-systems are shoved to the cloud. Fortunes can be saved doing those things in-house, but the thing that happens in-house is - replacing Arial with something that looks almost like Arial.

Isn't that a litte weird? (Even if it is also wonderful) :)
I made a recipe app. I hated ads, and we figured they were really inefficient too. People in a health recipe app want food stuff, and they'd get ads for chocolate or blow up dolls.

So I released the app with a "store" button that went to a coming soon page, but let people enter their postcode if they were interested. We also released with a really janky chat system that just flooded later with people asking for where to get some ingredients.

We found a partner who sold diet ingredients. They offered to do distribution and delivery, and we'd just tell them who to send it to, then pay 2 weeks later.

I added a janky cart system. Users would click add to cart with their personal details and it adds the whole thing to the db. We'd then link the items into a cart based on phone number && delivery status (I did not take database classes at this point and did not know about normalization and JOIN TABLE).

So we released expecting someone to accidentally click add to card on maybe 3 items. But nope, it was 300 items within the first hour. What's worse was we didn't have an order management system.

I expected most of it to be pranks and fake numbers, but they were real. So I did probably the most heroic bit of coding since college and built a whole order management system in a day. It bundled orders into a "cart", had templates for WhatsApp telling people where to bank in cash, notified an admin if payment or delivery was pending past N days, and let us track who received the orders. Day 1 features. Customers loved the really hands on service, especially us asking if they received the package.

We spent 3 full days, day and night, trying to clear the backlog. Orders kept coming in. I asked an accelerator mentor what to do in such a situation, and he said they'd just take the latest orders because the ones from days ago would already be pissed and cancel by now.
Viking Link joins UK and Denmark power grids for first time
Rust deadlocks just fine.
Our team utilises Microsoft Orleans. The virtual actor model makes it easy for us to create new features. Like you I wonder why actor model systems aren't more common place.
Flatpak permissions are very broad by default in most applications. Even if you manually override them by using Flatseal, some permissions like X.org or PulseAudio sockets are very problematic because these legacy protocols are not designed to be secure. Even if you manage to lock down permissions and only use modern apps that support Wayland and Pipewire, the Flatpak sandbox still exposes a lot of kernel attack surface because it blocks very few syscalls. I think they should add something similar to Win32k lockdown (ProcessSystemCallDisablePolicy) on Windows and disable insecure components like io_uring.

As for immutable distros, AFAIK Silverblue and others are immutable in the sense of package management, but there is actually no process to ensure the integrity of the full boot chain because initrd can be trivially modified by the host and is unsigned. There is a UKI (Unified Kernel Image) proposal that will likely be the path going forward (at least on the Red Hat world), but I think it's still years away.

In my opinion, if you want to use Linux desktop securely, just use Qubes.
The main limitations of ChatGPT 3.5 for a non-programmer is that non-programmers don't know the right questions to ask; that 10% of functions it produces are buggy in ways the AI can't fix by itself; and that the source code for a useful program is longer than the context window, so it will for example generate a Vector class with "mul(b)" method and later try to call "multiply(b)".

I'm told GPT-4 is much better at bug fixes, and there are various options for longer context windows.

Knowing what question to ask, though? The AI seems to contain the knowledge to all the questions, as if I ask them for a list of questions I get a useful response; and now someone has to answer the meta-question of "how do you want to present those questions to a user?" as there are many ways…
That's not quite unique, is it?
I remember the IE3.0 or maybe 4.0 crashes every time.
I don't sense any combative tone - the statement was describing the state of things in a truthful manner.

I find your tone ("they need to calm down", "take a break from social media") much more condescending and passive-aggressive. Maybe you are projecting your own feelings onto others? Therefore, maybe the advice you're giving to them is actually advice you want to give to yourself?

Note that this is merely an observation - I have no way of knowing as I don't have access to your mind, and I don't care either way, so feel free to label my comment as combative, too, if you wish.
This seems fair enough to me. That ChatGPT currently struggles with certain types of maths problems points to reasonably fundamental shortcomings in what otherwise appears to have the beginnings of a general purpose reasoning engine (whether you consider it AGI or not), and I'm willing to bet extraordinarily clever minds are working hard on trying to address those shortcomings.
Look at the extremely popular async_trait macro crate: https://crates.io/crates/async-trait .

What it does under the hood is to box everything. See https://github.com/dtolnay/async-trait#explanation

You would think that you should be able to desugar async traits to something that does not need to box. But this is not possible with stable rust.

There is an effort to make this possible. See for example this discussion here: https://blog.rust-lang.org/inside-rust/2022/11/17/async-fn-i...

Initially it was thought that Send bounds would not be needed, but community feedback strongly suggests that Send is indeed needed.

https://blog.rust-lang.org/inside-rust/2023/05/03/stabilizin...

All this is a real problem, and not just a "you are holding it wrong" problem.

Edit: here is the - still open - issue about higher-ranked lifetime errors: https://github.com/rust-lang/rust/issues/102211
X+++
In C a string is not an example of an array. If we can't agree on terminology for a discussion that requires extreme precision it becomes difficult to keep going.

Networked code does not as a rule use C style nul terminated strings though, in the case of fixed length buffers they will usually be accompanied either by a length field or by zeroing out the end of the string or even the whole buffer (the latter is much better and ensures you don't accidentally leak data from one session to another).

Networked code doesn't have to be written in C to begin with. Regardless of implementation there usually is a protocol spec and you adhere to that spec and if you don't then you'll find out the hard way why it matters.

This particular vulnerability has nothing at all to do with C strings but in fact has everything to do with a broken implementation of length based strings, which could result in the length being negative, which is at least one problem which C style strings do not have... (small comfort there, they have plenty of other problems, but that one they don't.).

This is the fix for that particular CVE:

https://github.com/nginx/nginx/commit/4997de8005630664ab35f2...

Which stems from integer overflow after doing arithmetic on the lengths.

It looks to me as though you just pulled the first nginx CVE that you found and posted it without looking at what the CVE was all about, without realizing that the ancestor comment was referring to the string implementation inside nginx which lives in the referenced file, whereas you are pointing to a CVE related to the parsing of HTTP chunked data requests, which resides in an entirely different file and has nothing to do with string handling to begin with.
Popular Airline Passenger Routes Refresh
https://en.wikipedia.org/wiki/Court_of_Chancery

Derived from the word Chancellor.
They do. Otherwise so many wouldn't do them. They might not last long time, but looking back past decade the environment was perfect on them.

Not that Meta didn't actually manage to scam add money out of companies.
Apparently, models finetuned for coding are better at logical inquiries than those that are not.
They didn't ask about the phone? Just sent you $600 and didn't think about it?
Mozilla has an instance, but you currently need an invite. The company behind Mastodon is also a non-profit and runs a couple of instances.

https://mozilla.social/

https://mastodon.social/

https://mastodon.online/
> at the same time GDP is real and it does matter.

At least such a huge difference will have practical effects.

Can we fund our welfare systems without growth?
(Just imagine what we could do, if the budget was 2x)
lava monsters do not sleep
I considered those, but I think something like the Shuttle DS line of fanless mini-computers are nicer (especially since they have two Ethernet ports). See for example:

https://www.shuttle.eu/en/products/slim/ds20u7

A drawback is that Shuttle has less frequent updates than the NUC, and it's harder to find them in local stores.
Apple? You mean the company with mobile market share below Windows Phone, until Microsoft lost interest in that? ;)
I changed it to Hasklig, briefly, and then to Iosevka, which I’ve stuck with the past four years.
The branching factor of Go prevents brute force calculation of the best possible moves. It isn't even obvious how to write a function that evaluates how strong any given board position is. The AI had to learn functions to do that.
Leaked Google Salary Data Shows How Much Thousands of Employees Make
No, no, Java is old and slow. Let's compile typescript to javascript, write the user interface in React and HTML (with some parts hidden in CSS files with some selector and expression magic to make it more fun), and WebAssembly for the performance critical stuff. Easy-peasy.
OMG! This is it. I was right to ask this on HN. Kudos! And it's in Java actually.

Also, apparently someone made a modern clone: https://github.com/OpenConstructor/OpenConstructor
https://archive.ph/gcGyD
Stacks – a search engine for your bookmarks
Stacks helps you bring all your links, bookmarks, and posts together and find it fast. Stacks gives you smart recommendations for your searches by turning bookmarks into personal and shared knowledge-base.
I'm really happy they moved to masto, their content just became much more accessible
It had that as well, and undoubtedly it was the main attraction, but iirc it was already not refreshing the whole page when clicking on the email index to read a single email - if not at launch, very shortly after. They later added "html mode" for compatibility with older browsers.
Maximize efficiency and revenue by leveraging nonprofit trends with Salesforce nonprofit Cloud. Also, learn how can nonprofit industry increase fundraising and impact with these nonpropfit industry trends.
I would argue that ChatGPT is actually quite good at "mathematics", in the sense of helping me formulate a problem in an appropriate mathematical structure, and coming up with a good sequence of steps to solve / simplify it. Not perfect by any means, but not bad at all.

What it is bad at is actually performing the steps accurately, but as others mentioned, that's where Wolfram and/or a code interpreter would come in.
> The 7 to 1 casualty rate came from the classified US military documents that were leaked in April 2023 [1] These documents were leaked to a Discord channel and have now been scrubbed from the internet.

You are unfortunately quoting a fake numbered that originated from a poorly photoshopped version of the legitimate documents. The real numbers are as follows.

Russia 35.4k - 43.5k KIA

Ukraine 16.0k - 17.5k KIA

https://twitter.com/yarotrof/status/1644226867623280641

> The 300k casualty estimate was attributed to Scott Ritter, a former United Nations Special Commission weapons inspector for the US [1]

Scott Ritter is also a twice convicted pedophile and a pro Russian propagandist.

> [1] https://tass.com/world/1601683

A yes it makes sense now your source is literally just Russian Propaganda.
Was excited to try, but couldn't find any vanilla PHP or PHP framework support in your list. Are you going for JS frameworks only?
Why not both? Any reason to seek democratic control over the workplace is a good one.
The W rating of wind turbines is misleading, because it's the max output, which is very rarely attained. The real average output is usually just 10 to 20%.

Nuclear can typically deliver 90% of its max output.
I know you're being facetious, but I'd absolutely be in favor of having AI benchmarks for any and all of these.
All these companies have several EU antitrust proceedings against them at various stages of completion.

(And just to preempt any jingoism: EU-based companies also get their share, just not in tech because tech-in-EU is a joke)
This might be helpful when creating lists of things on HN:

https://news.ycombinator.com/formatdoc

"Blank lines separate paragraphs."
You can add me and I believe many more to the list, unfortunately based on my search on public sites it often states Remote US.

I assume one has to be well known expert in the field or have personal connections to secure such contracts.
I think the idea is that being the next C++ means being just as hard to write as C++, and then saying "why do we need the next C++ when we already have C++?", but I'm curious if my interpretation is right :)
I've developed apps using XAML for a considerable amount of hours. XAML is significantly more restrictive than CSS. Windows UI toolkits will give you a bunch of pretty high level components, but the primitives for build anything else are extremely poor. It lacks something like flexbox or grid.

Last time I investigated having a uniform grid of items is impossible without falling back to custom C# layout code.
The point was the usability degradation through an example not the ways of making screenshots...
Yes, because it would be backward and limiting to do that. Note: I never said I don't want to give anything back - I said I don't personally care specifically about the author/publisher. I don't want to establish any relationship with them. If I'm paying them directly for something, I'm paying them for that thing - not also for relationship (which really is a sales channel), not also for being advertised to. If I'm paying some intermediary, then rewarding the maker is the intermediary's problem, not mine.

And I maintain that your attitude is one that makes the world worse. We should know where things come from and not have an anonymous transactional attitude towards it. Our technological civilization as you call it has led us to destruction with only a minority benefitting.

BTW, my favourite place to get bread is one in which they actually sell and bake it in store (a tiny market with its own oven).
Blob?
Debian Looks Forward to 2038
Crazy town? Or simply where FB / Meta is now? Wall Street doesn't like surprises. These type of rules create - at least the illusion of? - consistency.

Put another way, Meta has jumped the shark. It's startup days and the associated mind set are now long behind them. Expect to see them all wearing Meta blue suits - a la IBM - soon :)

Note: This isn't necessarily a bad thing per se. It's ultimately a matter of perspective. Sure, HN won't like it. But HN isn't Meta's market and/or concern, eh.
That'd be for the Basque Country region, the region of origin for Jai Alai.

There, the equivalent for Francisco is Frantzisko, although I think is way less commonly used. I almost always hear Patxi, even in formal settings. For example, a former President of the Basque Government (the Lehendakari), and also former President of the Spanish Congress of Deputies, always goes by "Patxi" (Patxi Lopez).

Also, like in the Patxi Lopez case, you might be born or living in the Basque Country and named Francisco, but go by Patxi.

Going by Patxi when you're named François it's because the Basque Country region also overlaps with France.
WordPress and Toolset Increase PHP Requirement to PHP 7
Also, Teams integrates with the other MS stuff. If I share files in a channel, in the background it is "just" a SharePoint which in turn I can add to my OneDrive. Meaning I can save a file in Word to that SharePoint and everyone in the channel can access it.
Can someone please explain to me the logic of why forcing or encouraging PEPs to not use banks is supposed to decrease bribery and corruption? Seems like you would want to be absolutely sure that any such people kept their money in banks where every transaction will be logged. Also, how were UK politicians convinced to pass this law that only seems to inconvenience themselves?
There's two ways to look at this that others commenters have hinted at:

1. The institutions are tremendously capable and trustworthy, and somehow people aren't trusting them as they rightly deserve. Then this lack of trust is a big, big problem! It's a mismatch and we need to figure out why people aren't trusting these otherwise great, selfless, highly competent institutions.

2. The institutions are incompetent, looking out for their interests vs the public, and doing things that otherwise make them untrustworthy. In this case, the lack of trust isn't a mistmatch between deserved trust and realized trust, it's the realized trust being in line with deserved trust.

Everyone might have their own take on if we're in a case 1 or case 2 scenario. I personally think it's more of a case 2 situation at this time.

Trying to identify your priors about what you expect as a baseline level of competence from a big org just based on them existing at all and having an authoritative name might help you learn something.
It's hard to see into alternative worlds. I can tell you what my belief is, but I can't really prove it: if Meta did not exist (and no other similar company filled the same niche), the world would be better by most measurements. People would, on average, be happier.

People in general are better off living in a better world.

And most Meta Employees would have found other jobs. I mean, sure, in this alternate world some specific people would be worse off. I would wager they would be the minority by far.

Let me know if you get a timeline-scope and we can verify.
I remember someone a while back tried to pass off a script as being A.I. generated when it clearly wasn't and I thought to myself, will we need to develop a reverse Turing test? Of course some one already thought of that;

https://en.wikipedia.org/wiki/Reverse_Turing_test
Biden administration launches new cybersecurity label for smart devices
So who will end up paying for the server costs?

I don’t have a problem with their monetary model, because they don’t paywall any essential feature. and not in-your-face about it, and it really is one of the few apps I use on every single device I own.
Using functions in text just makes it hard to read.
Verve..? Virgil for sure.
It is time to embrace the IoT revolution with remote developers at the forefront!

I am certainly looking to discover the limitless possibilities of connectivity and innovation in the Internet of Things (IoT).

This is a good article that goes into the details of the fascinating world of IoT and remote developers, pioneering the next tech frontier. I want to learn more about the role of remote developers in shaping the IoT frontier, their contributions to industry transformation, and the challenges and opportunities they encounter in IoT development.

Please do give me your suggestions on articles on the given topic. Also feel free to let me know what you think.
Suggesting that single threaded concurrency is the right way to do it when building tooling is completely asinine.
I don't know, the world is full of crazy people. In the end this will be used so much, that it will be heavily optimized, so people will compile their normal languages towards it. I mean, I am obviously joking, but in a crazy world anything is possible.
A modified web browser that helps in responsive web development
I don't see the point of this; you can already achieve something quite similar by compiling GNU PITA (Processor of Interactive Text Activity) with J.P. Blacker patch on top of it, which is publicly available on his FTP server.

Then to get interactive content; you just pipe the content of each page to the pita daemon using UNIX sockets and write the output to a file descriptor in the /dev/screen directory (just compile and mount the "interactive-wp" filesystem on /dev/screen first, of course).

The only gotcha is to ensure compatibility between these components, but someone shared a compatibility matrix on IRC a while ago, Sio it's common knowledge at this point.

Really these companies "innovations" are a joke.
The font that introduced me to ligatures <3
You might enjoy The Passions and the Interests by Irving Hirschman, which gives a history of how the concept of "material interest" was introduced as a kind of intermediary state between reason and passion, partly to justify an emergent set of capitalist ideologies.
> The difference is, being consistent with handing out such punishments (downvoting) and giving negative labels (vapor). Treat all the languages the same or equally apply those rules

???

Isn’t that literally what I’m doing with my examples of like 6 different programming languages?

> Don't be so angry or surprised

I apologise if I somehow came across as angry; I’m simply stating a fact.

There is no conspiracy.
PartySocket, WebSocket that automatically reconnects if the connection is closed
JavaScript was originally going to be called LiveScript, associated with LiveConnect. It was renamed for marketing reasons, because Java components were seen as the future for code on web pages, and it could script the interaction between different Java components (potentially from different sources).

That fact it could be used equally for components written in other languages, if they were ever supported by object tags in common web UAs is why it had a more generic name initially.