skysight-inc/HackerNews huggingface dataset:
GNU had to create a convention for the --long flags to fit all of their options.

I think the convention itself is good - I prefer long flags in scripts for improved readability.

But GNU is anything but minimal - compare GNU ls[1] with BSD ls[2], and try to recall the last time you needed --dereference-command-line-symlink-to-dir.

[1]: https://linux.die.net/man/1/ls
[2]: http://man.openbsd.org/ls
Wouldn’t be at all surprised if no one was paying attention. Chrome on a top spec MacBook can chew through 100MB of JS without thinking about it. Someone on an old machine is screwed but hey, “works on my machine”…
MurmurHash author here, looks interesting and I will take a closer look later today.
Yes, I work in a language where junior developers and people deeply unaware of the language advocate anti-patterns and bad practice as matters of law, often for personal defensive reasons. Its hard to not feel patronized. You are correct in that I do not know you, but I have been doing this work long enough to see when people hide behind abstractions they don't understand as necessary to mask their level of confidence and then argue from for best practices from that perspective.

My best possible free advise: only advocate to what you practice. If, for example, you have never written an application in JavaScript without a framework, such as Angular, then you are an Angular developer not a JavaScript developer. If you speak to something you have never practiced with a presence of authority people with 10, 15, or 20 years experience will be condescending. That is why imposter syndrome is a thing. Its better to get the unexpected honesty from some irrelevant guy online than get hired into a job and either get it in person or worse compensating for a manager with imposter syndrome.
That's HTML emails _pretending_ to be plain text.

Meaning the 'plain' text is Html-formatted to look plain and there are tracker links and probably tracking pixels too.

Real plain text should be just like something a human being typed.

Also, ignoring the general scamminess of hubspot, the linked article says html mail is MORE likely to be flagged as commercial. The article, in fact, is entirely pro plain text.
> not interested in getting a degree just for the sale of having a degree

This thread is about learning stuff that is helpful for the systems programmer. One way to go about getting a degree is to learn as little as you can get away with, but you get the certificate. Another way is to take the opportunity to learn stuff, and a degree course provides structure and resources to help that. The certificate is gravy, knowledge is the protein. The value for money of the second way can be very good. Was for me.
> it shares with brutalism the trait of being deliberately unwelcoming to the senses as a way of demanding attention be paid to itself.

Interesting, is that what you take away from brutalism? To me brutalist design and art is deliberately unwelcoming to critique the blandness and safeness of our modern cushioned existence, not a puerile drawing of attention. I actually enjoy the aesthetic.

But then, disclaimer, I'm a sucker for histrionics and theatrical gimmicks.
In our lifetime, there will be a government system that will record DNA data for every baby born. It'll happen, just a matter of time.
yes, hire and keep them unless it is obvious their not capable
Yes the Paris everyone sees today was the product of Hausman bulldozing the place. Cities are living creatures not preserved corpses in a mausoleum.
This product isn't any less sterile, boring and robotic.

Just the opposite. It's ostentatiously sterile, boring and robotic.

While also being retro, and trying very hard to look like something that might have appeared in the original Matrix movie - which was 24 years ago.

Visually, it's unoriginal, which is an unforgivable design sin - literally a stock laplet with pointless metal bits stuck on which will get in the way if you're trying to use it seriously.

It fails as fashion because it looks like a mess, neither cool, exotic, nor aspirational.

And it fails as design because while it's - perhaps - trying to be ironic, it takes itself too seriously to be funny. And it's just not very functional.
> How likely is it for an attacker to get access to the user's cookie jar at a single instant in time only?

Depends on the dwell time the attacker has until detection and eviction, but generally speaking, in the scenario where session tokens are being harvested from a user’s workstation or something like a jump server, the attacker is going to be able to access stored session tokens from the most recent login prior to their gaining access and any that occur during access. In any case, shorter session tokens are going to result in less access for the attacker. There isn’t a scenario that results in more access, and only absurdly contrived scenarios that result in the same access.

> If the token isn't refreshable without a "real token" the "real token" will probably need to be somewhere the attacker can get it anyway.

That may be true of ticket-granting-ticket schemes, but not for single/multifactor authentication for ticket schemes. Both scenarios exist and need to be accounted for appropriately.
Dude,Where's My Donations? Wikimedia gives another $1M to non-Wikimedia projects
Depending on context and the audience, it could be fair to use "RAM" to refer to SSD storage.

SSDs are random access, just not volatile like DRAM.
SoftBank buys Vision Fund's stake in Arm at valuation of $64B-sources
Some context to help understand how absurd this article is: Britain finally reached it's pre-WWII population level in 2017. That of course includes immigrants.
with a backend, data persistence is simply CRUD. for the backendless app, it's all in localstorage, and it can be downloaded into a file as backup. all the logic is in the browser, just like any desktop application. you should not need a server to manage personal data that is stored on your computer.

of course it is a tradeoff. if the user wanted to save their data outside the browser every few minutes then that would not be practical or if there is to much new data being generated so it doesn't fit into localstorage. i'd either need a server (even if running locally) that can save that data without user intervention or i should not use the browser as a development platform. in such cases a browser based SPA would have been the wrong choice. maybe electron, or a traditional desktop framework
Besides the three mentioned in the article (stringent accuracy requirements, fast edge inference, involved style transfer task) are there other good reasons to fine-tune?
"More complicated" but not by much. That's where groups come in.
> human loves convenience

Except that it's not a matter of 'convenience', it's a matter of being able to do their jobs. Security is a hard job, in part because you have to come up with security practices that are actually workable, and keep work impediments to a minimum. It's really easy to just add more restrictions. It's hard to add security that doesn't impede the users. When I see 'defense in depth' being invoked to justify massive work impediments for minimal security improvements, I don't see effective security practices - I see a cargo cult.
No. From what I can tell the whole reason for a SPA is so that people don't leave your site. You throw away a lot of good things (like urls to content) so that you can push more ads at people.
Caching is a thing, as are distributed networks.

The notion of mobile-device-as-origin-server which can provide either content in a local context (on a LAN, localhost-only), or globally via cache-and-redundancy / cache-and-forward networks has definite and positive use-cases.
I think that’s a good yardstick. If you don’t mean that I should be able to sue all restaurants with a women’s bathroom because I was disadvantaged when the only stall was occupied.

So I like your idea but add the word systemic. What I mean is I can wait 5 minutes to go for the bathroom.

So there was a system in the restaurant that kept me from going to the bathroom no matter how long I wait (i.e they only let women go to the bathrooms) I can’t claim I was discriminated.
Well let's see...

If reading articles about topless musicians is part of your job, then it's part of your job and everyone in that workplace already knows that.

If it's not part of your job, then why are you doing it in the workplace?

The title did "warn" that there at least might be simply by topic and the publication.

How is one supposed to be ok with reading and thinking about breasts but not seeing them? What magical thing happens differently through the eyes as an image vs through the eyes as language?

...especially outside of a sexual context. (for those too terrified to risk looking, the single pic did not depict any sort of sex act)

I don't see even a hint of a valid argument here. I only see something, less wholesome than those breasts "on display".
That the project was supposed to ship in three months is an important part of the author's specific experience.

That they gave the project another two months is another important part of the experience.

So the specific project was clearly a failure. They weren't talking about rewriting working code, let alone code that was making money.

To me, it looks like it took a lot to violate the never-start-over-prime-directive-for-progress in creative work.
As I said upthread - lots of caveats and it's context dependent. For one thing, this usually assumed there was not a "close human relationship" but social situations where you aren't that close.

It has to be OK to say no. In many scenarios or cultures it is considered rude to say no. So if you're not able to gracefully say no without being considered rude, it's correspondingly rude to ask because you're basically saying "do this for me or else you're rude."

It's not an ask at that point, it's a demand. If I'm the asshole if I say no, then I don't want to be asked the question in the first place.
Excuse me while I go to my screaming room to imagine Google Maps as an MPA.
I'm certainly not going to take life advice from Google regardless of whether AI is involved or not -- although the more any company trusts AI, the less I trust that company.

I'm very unlikely to take advice from any AI unless it is obviously good advice on its face.

If I'm in need of advice, I want to get it from a human. Preferably a human who knows me well and whose judgement I trust. In the absence of that, then a paid professional will do.
Have you ever driven for Uber? As long as you're getting rides, it pays quite well after accounting for vehicle fuel and maintenance.

The only time it doesn't make sense in my experience is if you're in a low-traffic area.
Native americans have sovereign land within the United States. I think it is ok to make special cases to correct specific historical disparities for particular minorities, but our law system is not equipped for it, and there is too much disagreement and polarization to make minor concessions possible. And lawyers love to play with corner cases to the detriment of the rest of us.
Of course your equity helps in your retirement. This seems like an absurd statement. Do you really think a 70 year old with a paid off mortgage is in no better position than one who is destitute but has a free roof over his head guaranteed?

https://www.investopedia.com/articles/04/120204.asp
Society wouldn’t advance if anyone could copy the work of others either. Gender would swoop in, create these on the cheap and completely ruin the sound that the creator intended.
Is there a method for this to be "Augmented" and not "Replacement" eg in the example from the blog post, "retriever=vectorstore.as_retriever()" which I believe would return something like "I don't know" if the content is not in the vectorstore.

In humans, a person might say something like, "I'm not an expert, but X" and I think being able to default back to the underlying LLM would be useful.
As an educator, I base my suspicions on three hallmarks:

- verbose, insightful, comprehensive: I teach beginners, and even advanced students know not to waste effort on a 3 point response with five paragraphs.

- itemized lists: LLM will frequently spit out a numbered or bulleted list that's well-organized, in many contexts.

- total ignorance of our scenario: the clincher. A human student is usually aware of the background of the questions we're asking, but if they prompted an LLM, odds are that they wrote a simple, isolated prompt. A bunch of irrelevant crap-shoveling is a great way to tip us off. Thanks.

These three hallmarks typically encompass third-party plagiarism, too.
Yeah, and a bunch of other languages that also compile to wasm. But wasm is rarely a "first class" citizen (it is a tier 2 target for Rust, so there are no automated tested, for instance), so again, can't fault anyone for not making that choice.

But yeah, would be interesting. Actually, I'd also be interested in a perf+efficiency comparison between JS and $lang+WASM on the backend, because this discussion makes me realize that the JIT tradeoffs are wildly different for a long-running process servicing many requests per second compared with many copies of a single-user client.
one of the pitfalls of hobbies like historical reenactment is precisely this. Nobody does armour or most material goods correctly in visual media, and once that’s a salient fact for you it really kind of breaks the spell.
one day, a bug like this will take down an airliner or a power grid and kill thousands of people. and there will be a congressional hearing about it. and some ageing compiler engineers will have to explain to a panel of irate and disbelieving senators the concept of UB. they will have to explain that, while computers can add two numbers correctly, we choose to make them not do that. for performance.
This definitely seems like a CFAA violation.
Sounds like you sacrificed your time to make things right! Good on you!
Slightly tangential, but if money were no object, do vacuum tubes or solid-state amps have a longer service life in this kind of application?
At the end of the movie Gladiator(2000), Maximus has a vision of being reunited with his family as he walks through a field of wheat. However the wheat is clearly a modern dwarf variety. These weren't developed until the mechanization of agriculture in the 20th century. Ancient varieties would have been taller because the stalks were used as a building material.
You're ignoring what might be the most important part - energy input

Cows are self-motivating bioreactors that vaguely maximize inputs as possible. You don't need to hire a tech or buy freezers or buy pipette tips or clean an industrial reactor for a cow to make grass into beef. Evolution has provided us a method which has reached some local thermodynamic minima. Not so much with Impossible patties.

And anyway, afaik, lab beef still has BSA as a necessary component, so you need cows to make fake cows.

Eat a goddamn bean, dorks.
I use revanced on my phone I don't even know what YouTube is supposed to look like.
For some countervibes..: I fucking love the aesthetic. Come on dude/persons here at HN, it's fucking Henry Dorsett Case's cyberdeck. It's outrageously priced, and noone is forcing you to give up your macbook. It just looks interesting.
Mechanical components in hard drives can act as synthetic microphones (2019)
not your objective is make the organización loss the less money posible by reducing the incident rate the recovery rate or the impact if you damage the org more the risk you are saving against you are liability, this isn't good vs bad thing, this is decide when the line is worth crossing and this article say at least in their opinion this open isn't, you still have multiple other layers.
What a bad and misleading title for a 2 paragraph "article" that barely hints towards its own point.

The reality is our economy thrives on the ability of some people to claim the fruits of other people's labor. This is the core feature of capitalism: parasitism.
Err. I might be misunderstanding. Don’t you agree with my counter argument to GP?

You’re saying animals are extra steps and I’m saying both plant alone or mixed use could be sustainable?
Yeah you need a better name for that, because, while the phenomenon is real, the name is kind of meh. Why not the electrician problem? Or the teacher problem? Any profession would work. Why plumbers? Plus, I can't really recall any movie or novel where expertise in plumbing was essential to the plot.

Editing here because based on some replies my message wasn't clear: I was talking about expertise in plumbing exhibited by one of the protagonists, not someone watching the movie obviously.
My grandmother said you’d offer food to guests because you knew they were hungry and they’d refuse because they knew you didn’t have enough for yourself. If you actually had enough food for a meal you needed to convince your houseguest.
Implementation defined means it has a defined behavior on every implementation. In the MIPS case defining that behavior would force the compiler to generate strictly signed instructions for signed values and define how the runtime platform handles these interrupts, rather than leaving the compiler free to generate "whatever works".

Look, a lot of UB is frankly stupid and shouldn't be in a modern language spec, including signed overflow. I'm not defending that, only giving an example where you have to break compatibility to eliminate it.
> I think it's a bit out of line to call this malice.

I apologise, but note (warning: weasel words follow) I was careful to say it looks like malice to me, not that I have any indication that it actually was malice.

> I'm not convinced implementation-defined behavior is really any better, though. Packagers and end-users should not have to ensure that the code their compiling is "compatible" with the compiler or hardware architecture they want to use.

I think it is better, purely because then the resulting code can't simply be omitted when an integer may overflow, the code still has to be emitted by the compiler.

Right now all the worst bits of UB has to do with the compiler optimising out code. With IB replacing UB, the implementation will have to pick a behaviour and then stick with it. Much safer.
I answer with yes. People first.
Interesting question. So, for context: I meet a lot of people from the investment world and within that world there are many strata, former and current entrepreneurs, media people, heirs and bankers. Some of those have made it very big, their successes are quite visible but it isn't always immediately obvious who the people behind the successes are. But in my line of business that veil gets pulled up on occasion and then you can get a closer view of what that world looks like and how it works.

I just did a tally of the ones I'm sure are well above $1B, and I would say the ratio is about 3:1 for jerks vs really, really good people. I really don't want to drop names and it is one of the reasons why my company website does not list our clients. But my exposure is mostly to EU parties (though I know a very small number in the USA as well and one in Canada).
You can always enjoy Ottawa's night scene. In your hotel watching reruns on cable TV, I suppose.
> Equality means treating everyone the same, equity means treating people differently based on their needs and history.

> If you think everyone should be treated the same, then you agree with the plaintiffs. If you think everyone should be treated differently so that they can all experience the same outcome, then you side with the defendants.

This is a moral argument. However, legally, the Civil Rights Act doesn't have any exceptions allowing racial discrimination as long as it's for a "good" purpose.

> The only way to fix this problem is it dedicate resources to building ramps, which means treating people in wheelchairs differently by spending extra resources to accommodate them.

Those ramps are available to everyone, whether they need them or not. I wouldn't call this discrimination, any more than a store that sells cheese discriminates against the ~65% of the world population with lactose intolerance.
Publint: NPM Package Publication Linter
Systems like that probably do have some form of plain text password history which is very wrong. They might also do some basic common transforms of the password (Increment the numbers, did the hash match? Decrement the numbers, did the password match? Swap case around, did the password match?) but I do agree that's probably a pretty big stretch versus taking the easier (and worse) way to make that anti-feature.

I'm not saying that everyone does it right, I'm just saying having a password history enforcement does not require them to keep plaintext passwords. You don't need to "keep everyone’s password and previous password around in a database" in order to have some form of password history enforcement.
Lab-Grown Muscles Breakthrough: The Future of Medicine and Meat
Don't they mould?
What is the impact of this?

I have the same aversion to government power built into my bones but I can’t think of a concrete way the government would be able to abuse this capability to assert power over me.
Not at all. I'm just in awe about the sheer amount of incredible code that Bellard is able to produce.

As a direct refutation to what you're saying, I feel similarly about Jeff Dean at Google. His productivity is pretty legendary, and all of the stuff I know that he's done is private/proprietary (and very profitable) to Google.
COBOL is really quite straightforward and readable. I don't think a developer who's already familiar with a modern language or two would have a hard time picking it up. The system it's operating is domain-specific knowledge anyway, and would be something a newcomer would have to learn (or be familiar with) regardless of language.
Language-level concern imo. https://doc.rust-lang.org/nightly/core/num/struct.Wrapping.h...
There is a difference between "handle this string to do a normal thing, but make it secure" and "do something stupid with this string, which goes against all good practice, oh and you can't use the obvious tools because reasons".

for example, if you are using strings to do addition, why the fuck aren't you allows to to atoi? also, why are you using strings to hold numbers?

everything to do with that question is something that you'd insta-reject in a diff/pr/mr.

Surely converting from string to int, validating it, catching errors and generally making it nice, is a much better test?

Its like going to an interview for a copywriter(someone who writes text) for safety sign company, and they ask you to make a riddle in English, but you can't use any words that are derived from Latin. Sure it shows an impressive command of both etymology and english, but its totally opposite to making clear, easy to understand text.
not quite needed. People already volunteer this information. It only takes one relative to identify with reasonable certainty who you are based on a random blood sample because of this.
ARM actually kind of has that. The register file has an overflow flag that is not cleared on subsequent operations (sticky overflow). So instead of triggering an exception, which is prohibitively expensive, you can do a series of calculations and check afterwards if an overflow happened in any of them. A bit like NaN for floating point. From what I understand the flag alone is still costly, so we will have to see if it survives.
That's pretty much exactly what Red Hat does with their Enterprise Linux.
> The company's first website was an AngularJS single-page application. AngularJS didn't support server-side rendering, so the website was slow to render on first load, but snappy once everything had downloaded.

That sounds like a pretty decent concession. I wonder if it was ever even a real problem. I'll bet the real problem is that nobody was willing to call it done.