skysight-inc/HackerNews huggingface dataset:
try them. you'll love them.

if you see the <= "less than or equal to" ligature and hit backspace once it will become <. it's very intuitive. this is how emoji operate to combine a face with a skin tone - it is two characters merged into one.

dunno why so many people see ligatures and clutch their pearls like it is some kind of rock and roll devil symbol.
Full details: https://www.qualys.com/2023/07/19/cve-2023-38408/rce-openssh...
It's a nice project, but - I guess as is tradition with the majority of C projects - it has resource leaks and buffer overflows. There is at least one resource leak, namely, `sfd` is not closed when certain `WARN()` invocations jump back to the `start` label; for example, when `gethostbyname()` fails (i.e. try a non-existent domain and observe that the sockets remain open with `lsof`). (It also seems to be leaked in the happy path, so presumably `SSL_set_fd()` does not take ownership.) And if the user simply presses enter, i.e. the input is an empty line, there is a buffer underflow in line 55 as `j` will be -1 initially.

Also

addr.sin_addr.s_addr = *((unsigned long*)he->h_addr_list[i]);

is a potential buffer overflow where `long` is 64 bits since only the first four bytes of `h_addr_list[i]` can be accessed, and also potentially misaligned for `unsigned long`; and it will also not work correctly on big endian platforms where `long` is 64 bits. Using `memcpy()` would have avoided all these problems. I am really confused as to how you arrived at the conclusion that "yes, this is the way to copy 4 bytes from A to B".

This sounds rude, I know, and I apologize; I don't want to single you/this project out personally. I am just frustrated that even today there are people who work on C/C++ projects seemingly without having made GCC's -fanalyzer/asan/ubsan/valgrind/etc. an important part of their development workflow.
> 6600 XT ITX card

What is an ITX card? I assume that should say pcie card?
What you're paying for is essentially to signal to employer that you've been able to make it into a very select club which is in turn acting as a proxy for intelligence/conscientiousness. As long as the seats are be limited, it will be worth the cost.
Doesn't it seem like this kind of fraud should result in prison sentences? I'm so sick of frauds in academia. I really wish the elites in our society still took the idea of Hell seriously.

Also: "will resign effective August 31"??? Shouldn't this guy be locked out of his office, have his laptop confiscated, and be banned from campus immediately?
Because of Covid science has proven masking is a waste of effort and resources. If you disagree you should really research the latest studies.

Here is a great starting point from 2021.
https://brownstone.org/articles/studies-and-articles-on-mask...

They are a failure. Globally.
https://www.amazon.com/Unmasked-Global-Failure-COVID-Mandate...

One of the largest peer-reviewed European studies says...
"These findings indicate that countries with high levels of mask compliance did not perform better than those with low mask usage."
https://www.cureus.com/articles/93826-correlation-between-ma...

Why? Because they are ineffective and were only introduced as a way to busy or "pacify" the masses.
It doesn't seem Jung really did the world any favors with this concept. He introduced highly inadequate terms that are mostly used to pigeonhole people into a simple box that supposedly sums up all their behavior. Turning it into a linear scale doesn't make it any better.

Don't like big crowds? Learn how to like big crowds. Don't know how to be with your own thoughts for a long time? Learn to do it. Don't say it can't be done, I've done it, and I've been told I have a learning disability. No one should lock themselves, or others, into a "personality" box, and all this nonsense should be entirely disregarded.
China is hardly alone in patent-trolling and government subsidized predatory pricing. The boogyman narrative is a bit of a red herring. Our patent system is broken. Our copyright system is broken. IP laws stifle innovation and are abused by public and private entities. China is just currently abusing fundamentally flawed systems better than everyone else.
Reading this thread, it sounds like this is an "open source" vs "Open Source(tm)" discussion, much like "agile" and "Agile" was.
I have the opposite experience with ligatures owning to years reading academic mathematics papers before coding seriously. I can still parse semantically dense symbology significantly faster than most code (even with years of experience) to the point where code seems almost comically inefficient. That said, I know many programmers take the implicit context intrinsic to mathematics symbology as often times an inexplicable cognitive load.
First time hearing about Idris idris-lang.org, looks interesting
I'd start by removing the subsidies and special rules around student loans. That makes colleges compete on price again which puts downward pressure on tuition.
OpenBSD: OpenSSH 9.3p2 Released
What are the actual papers?
True,

I think apple with its app ecosystem though could just let apps offer themselves as plugins to "siri-gpt", with their available function calls (like openai does now).

Their own apps, mail/todo/calendar could then play in a common ground which should be considered fair.

Apple has the perfect ecosystem to do this imo, they could knock openai plugins out of the park, since the apps would be ones that you use, and know about you, so would be far more useful.
A lot of the western US is going to be much harder to live in. Desertification, lack of clean drinking water, and heat being the major issues. The midwest is going to get a lot more crowded in the coming decades and that's before all the climate refugees from around the globe start really pouring in.
Even without this announcement, friends don't let friends forward their ssh agent. It essentially grants that machine access to your private keys. A RCE vulnerability is strictly worse than key exposure, but you probably shouldn't have been using it anyways.
That's not how sea ice works in general - the ice is 'centered' on the continent with 100% coverage and the edges are where you need to make a judgement call on whether they are covered or not. We've established an area grid encompassing the entire antarctic and measure the extent by seeing how many grids are at least 15% ice:

https://portal.nccs.nasa.gov/datashare/polar/CSIC/SH_animati...

but rest assured, we also measure the total sea ice area which removes all possibility of the 'bunching' you're concerned about -- it's similarly catastrophic;

Compared to the past 10 years: https://portal.nccs.nasa.gov/datashare/polar/CSIC/SH_yearly_...

Compared to the past 45 years with low/high/average:
https://portal.nccs.nasa.gov/datashare/polar/CSIC/SH_decadal...
"SEO is also a zero-sum game."

One with external costs imposed upon others.

I had a go at fixing this with Sitetruth, which was an attempt to tie web sites to real-world companies rated using info from Hoovers, the SEC, DNB, etc.
But the whole concept of tying web sites to real world companies now seems dated.
The syntax reminds me of Vue
Love this! See also ssllabs.com and sshcheck.com.
And yet this thread will start to get full of people “having doubts” and “just asking questions” any minute now
Useful, I didn't know that so far.

We don't use bastion servers. My only real use case for ssh agent forwarding is if I need some scp / rsync between two remote systems during emergencies and those systems have no trust via SSH keys setup between them. In that very specific case, I don't know a better way than <ssh -A> to the first system and have some <rsync -e ssh> from there to the second system. Still doesn't feel great, even though I know only the people who could steal my keys are on my team.
Can't parsers pretty easily handle UTF-8 if you just consider identifiers (and strings) as bags of bytes?
> According to Jerry Yang, chair of the Stanford Board of Trustees, Tessier-Lavigne will step down “in light of the report and its impact on his ability to lead Stanford.”

Jerry Yang, as the same Jerry Yang that co-founded Yahoo. Didn’t know he is on the board of trustees at Stanford.
Oooh, that does look great. Very similar to JB Mono, but I like the defaults in Commit Mono a bit better overall. The asterisk, the positioning of the quote marks, the slashed 0 instead of dotted.

Great alternative. A side-grade, maybe. Thanks!
While I believe you are trying to make a good faith insight porn comment and I don’t think you should be (inevitably) downvoted, I am skeptical of the methods of the “rather popular podcast” that led them to make such a claim.

Also, I’m not sure if it’s the gotcha you think it is. If I were you, I would take a long hard look at claims like these, and how even when they are not true, well, an item that says “So and so claim turns out to be not true” is itself propagating the untrue claim. It will illuminate for you the true way Reddit is quite toxic, and why among many reasons content moderation and publishing are hard.
For me it's not a matter of speed, but distinctness and fitness to the meaning.

A ligature happening is kind of a "syntax affordance" saying that the code is correct, and it indeed says "!=" and not "! =". It kind of helps my brain elevate the code from "sequences of characters" to "serialised syntax tree".

The fact that the "not equals" operator is the exclamation mark followed by an equals sign is purely an artefact of the practicality of keyboard input. Ligatures are a simple way of stepping away from the raw text and into the meaning of things, just like syntax highlighting helps transform "words" into "tokens" on our brains, or rainbow parens help us visualise the hierarchy of the language in question.

(Though I find rainbow parens a bit too colorful and distracting, so I don't use them in practice, I like the idea behind them)

It is the same idea that proponents of visual coding advocate for, but text as a medium is much better because of how compact we are able to make it without feeling cramped.
The majority of times when i search on google I'm looking for someone's personal take on a matter. Whether it's a software recommendation or alternative, a recipe, or experience with a tool. Google only has listicles, top x, or best in 202x.

I used to search reddit, but the hostile mobile page ruined that for me. Now i go to yandex and navigate through malware to find what i want.

It doesn't help that recent trend of developers building their content website with react and such, have no little to no concept of SEO.
> it takes grit to get through a lot of tough degree programs as well.

We're talking about college admissions here though. How can you tell if a high schooler has grit? I can tell you that academic success is not the only answer. I got a perfect 36 ACT, 1600 SAT, and a high GPA and completely lack grit. I just succeeded in school by doing the bare minimum and having a high IQ. Should these schools just be trying to accept the people with the highest IQ? Searching for people who are the absolute best at what they do seems to be a much better measure of grit to me.

And your sales analogy seems a bit flawed. Why is it strange that different segments of the business value different things? Sales is mostly about just cold calling potential clients until someone bites. It makes tons of sense that the org values the grit and teamwork that organized sports builds more than the R&D org does.
Show HN: RudderStack Profile Builder – warehouse native customer 360 profiles
> This is the kind of stuff that corporate customers care about. They want systems that integrate well.

Great. I just want a system that allows me to view a PDF file that my teacher sent me without having to click through a dozen menus and wait several minutes.
> I know I can have deep, meaningful and long conversations… but I don’t find them a source of joy.

Sorry to add to the flames, but many (most?) introverts generally do find joy in deep, meaningful long conversations. It's the small talk they tend to dislike.

The problem is trying to shoehorn everything into introvert vs extrovert. The reality is it's a vector. Small talk vs meaningful conversations is an axis different from enjoying crowds vs alone time.
I am not your parent commenter but to me they added the nuance of "not all programming languages are good and we should stop pretending otherwise". And "we don't actually have as much choice as we think".
> People are terrified of parsers and parsing

As if parsing in C is going to make them less terrified.
Same as now. 1s and 0s. (Go ahead and say it! “You had 1s?!” :-)
Languages are not just the language definition, but the language and how people use it. The established practices and idioms. The idiomatic approach to Go tends to be very pragmatic, minimalist and direct. And in some areas: highly opinionated.

For instance, it discourages the use of frameworks and prefers libraries. It can be hard to pin down what that means.

Frameworks tend to dictate both how you structure and how you express solutions. Your code is usually very tightly bound to a framework and it is often infeasible to switch to a different framework without a major rewrite. Your application, to a large degree "lives inside a framework".

Libraries imply a greater degree of decoupling and you should be able to rip them out and replace them with something else without having to re-architect your software. If some thought has gone into the design, the change can be as little as a few lines of initialization code. (Think well designed APIs for SQL drivers).

It is important to note that this doesn't really have that much to do with the language. I wrote Java in much the same way I write Go. Prefer libraries, avoid frameworks, prefer writing concrete classes until you a) know you really need something that has to allow for abstraction/flexibility, b) know how to do it because you have already written at least one implementation of the functionality you might want to generalize.

There is nothing stopping you from writing huge frameworks in Go. And some people really want to. They can't help themselves. Thankfully, it hasn't caught on. At least not yet. Nothing in Go dictates it has to be a more "direct" language than Java. But how key people in the Go community practice programming and how idioms evolve has had that effect. It has lead to a lot more code that is approachable.

(Be happy I didn't use C++ as an example, because there every imaginable approach from "C with classes", via "templates everything" to the more modern approach exists. All at the same time. Written by people who all think they are programming in the same language :-))
I think that JetBrains Mono and Cascadia Code are simply the two best fonts for programming.
I kinda love the fancy-silly features (ligatures/etc) so i didn't give CommitMono a try. BUT, i adore the smart kerning.

Any other fonts with smart kerning?
Reducing it, ideally to pre-industrial norms. Stopping extreme weather is obviously impossible, and so obviously so that it's bizarre you're even trying to prop it up as a strawman.
The provost has also stepped down, presumably because she knew the new president will select a new provost. Given that she announced her resignation 10 weeks ago, she must have known that this outcome was the likely one. [1]

1: https://news.stanford.edu/report/2023/05/03/persis-drell-ste...
It looks too ... squished to me.
We're still creating a meritocratic elite, based on capacity limit and price of admission. Not everybody get to have an elite education, or afford such an opportunity.

Ideally, high quality education would be democratized and made accessible to anyone who want it regardless of their means to pay.
Not if he's colluding with the board to get a gigantic pay package for himself (a separate lawsuit is fighting his $56 billion pay package, calling it "the largest compensation grant in human history").
It's a common ingredient in dog food. If a dog is having some sort of allergic reaction, a vet will often recommend switching to kangaroo food to try to rule out a dietary cause. (I guess because kangaroo allergies are rare in dogs? At least in NA?).
Show HN: Scenic – explore and find interesting places along a route using GPT4
Hi HN,

Made a small app because I found myself doing this manually quite a few times using GPT-4. You put in where you're starting and where you're going, and what kind of places you want to see along the way, and it'll find places and identify a reasonable(ish) path.

It's very simple but it has some nice features (e.g. you can get a Google Maps link). The place features you search for can be basically anything and can be as opinionated as you'd like. This is just for fun, but please let me know if you have any suggestions!
Regarding the 2023 part, it's because dataclasses in Python are pretty fully-featured and part of the stdlib, so building rich data structures is quick, ergonomic, and helps remove/centralize boilerplate and parsing (aka validating, see https://lexi-lambda.github.io/blog/2019/11/05/parse-don-t-va...).

Regarding rude, yea it was a bit tongue-in-cheek (I would never hold a grudge against somebody for returning a dict).

You should generally define an interface for your function that's as precise as its logic allows for. `Dict` is as good as `Any`: it doesn't tell you very much about what the function internally expects. The sibling comment to mine does a good job going through this.
Not sure which ones, but here is the whole history of Marc's research publications: https://scholar.google.com/scholar?hl=en&as_sdt=0%2C5&q=Marc...
Or better, don't regulate the business, cure the addict, solving the root cause.

I'm not saying curing addiction is easy, yet if they have that much power, they can focus their efforts there.
For me, this is too much effort.

Instead I have a page on my site that tracks my books read.

https://www.benovermyer.com/kb/books/
>Doesn't it seem like this kind of fraud should result in prison sentences?

It should but it probably wont.
What makes you think that is better?
And pay back his salary ...
> universities shouldn't be chasing the brightest students, they need an education the least.

Or it can be seen as give education to the students that will make the best use of it maximizing value to society.
So if it isn't about trying to make things obvious, what do you think the goal is?
> just no release for openbsd itself it seems.

It was posted to announce@openbsd.org a few hours ago. Binary patches are available through syspatch and source patches on the errata page.
If anyone wants this capability, the chrome extension uBlacklist ( https://chrome.google.com/webstore/detail/ublacklist/pncfbmi... ) provides it. I've found it very useful for removing github scraper sites from search results. Whenever you see a garbage result in a google search, you just click "Block this site" and it's gone forever.
Arthur Whitney, is that you? [1]

[1] https://code.jsoftware.com/wiki/Essays/Incunabulum
If the average person were in an exceptionally good environment, they would likely get (much) better over time.
With that mentality, If you think hard, almost everything we do apart from food and shelter can be considered 'superflous'.

-- Watching movies? Waste of time

-- Playing Video Games - Rotting your brain

-- Watching sports for fun - wasting your money / promoting violence

-- Traveling for fun - you are destroying the environment

-- Any entertainment shows - promoting bad habits

etc.. etc..

You can extrapolate 'what I don't like, must be bad for humanity' to almost every product of leisure activity out there.

At some point, for some, unless you are living like an Amish or in some kind of 'Puritan' way, everything else you are doing is bad and you are a bad person, and that platform that enables it (Radio, TV, Online Apps, Arbnb, Uber) must be bad and needs to be abolished.
While i'm not naive anymore (i hope not, there's no way to tell lol), and i know most business is simply a scam/based on people's delusions or addictions or other vice without providing any value, the ad industry can't stop surprising me. In all my career i never seen a case of any paid ads actually getting people anywhere. But they continue to spend, and spend, and spend.

Retargeting may be the only exception, although it is annoying as hell, it won't let people forget about your stuff (and comes very cheaply because very few people will ever see it), so probably generates positive returns... But i'm not even sure about that one.
Does "a fully negative outcome" sound like "all languages are good"?
Chimps kill and eat monkeys and even other chimps. Not sure what I should rationalize through that behavior.
As more states legalize marijuana, employers are opting out of testing
This is strangely where I've found the most personal benefit of LLMs. As long as it's not too current or depend on recent information (like the weather), searching for information in LLMs reminds me a lot of Google 10 years ago.

Yea sometimes LLMs hallucinate, but sometimes websites are just wrong. For a variety of topics LLMs are just a better form of search.
I mostly agree with what you said, but critical thinking can indeed be taught in elementary education. Children can learn from an early age to question the reality presented to them, to apply analytical reasoning to arrive at their own conclusions, and perhaps most importantly in this golden age of bullshit, to be extremely critical of the information they consume online, from mainstream media sources, and even their peers. Not all children will pick up this practice equally and carry it through their adult life, but it's important that they're presented with these crucial tools that can help them be less susceptible, though not invulnerable, to information warfare. Unfortunately, education is mostly based around memorizing and regurgitating facts, rather than teaching people critical thinking skills.

To be clear, we're all vulnerable to IW in varying degrees. Thinking critically at the very least makes people more skeptical of the information they consume, and lowers the chance they would spread it further and "infect" others.

There's no easy protection against IW or a quick cure from the effects of it. It takes at least a couple of decades to educate a new generation of people to slow down the bleeding, and for the oldest "infected" generation to die out. But first the nation's government must realize that they are indeed a victim of IW, which is difficult to do because there's no direct link that points to it since it's an operation that spans decades, and because of the confused state it inflicts in its victims. Judging by the actions of most Western countries, they haven't even accepted this as a possibility yet.

This is an interesting interview[1] where all this was outlined 40 years ago. So this is certainly well known to all intelligence agencies.

[1]: https://www.youtube.com/watch?v=pOmXiapfCs8
NVidia isn't serving industrial embedded consumers either.
Sure but when teenagers shouldn't be actually gambling we have age restrictions in casinos and levy fines/revoke licenses if they violate those restrictions. Meanwhile, we allow this thing that pretty much everyone agrees is gambling, right down to being able to cash out winnings at a profit and we want to say "only your parents can stop you". How about putting loot boxes behind an 18+ restriction, and requiring id checks like casinos do? Is that not nanny state for actually gambling but is nanny state for thing almost identical to gambling?
Is it just me, or are there a lot of posts about typefaces on HN front page lately?
https://archive.ph/utyKk
it allows any Target team member to easily
sweep a store for skimmers

I'm unclear on how this is supposed to help - unless the skimmers are being installed by frickin ninjas it seems like they already needed insider cooperation.
Someone submitted this story with a better summary: https://news.ycombinator.com/item?id=36790301
He probably didn’t even read those papers.
But they're not pets that are released into the wild by the million.