skysight-inc/HackerNews huggingface dataset:
> Maybe (that was my point) truth is not as simple as science good right wing bad, and even people who dissent on basic facts can have valid criticisms of science and should not be put in a political "do not engage" box.

I never said or implied any of this.

> Morality is not simply a matter of acknowledging a shared universal material reality.

No, but without the shared reality is there even a point in debating morality?
They wear 30lb lead aprons. On a practical note, it's back strain from having that thing on 10-12h a day.
damn, they must've sold a lot of real estate assets to achieve this /s
In fairness, rewrites can be quite a bit faster than an earlier incarnation. By that point you've identified key gotchas, can simplify quite a few things, etc.
> "Use a library for everything" is how we ended up with left-pad on npm.

bollocks, that's because javascript doesn't have a standard lib.

> You do know we hire people who have to _write_ these libraries

I know, because I'm there. I'm working in VR/AR. We have a number of people who are world experts for doing what they are doing. Do I go off and re-make a SLAM library because I don't like the layout? no because I have to ship something useable in a normal time frame. I can't just drop 3 months replicating someone else's work because I think the layout is a bit shit, or I can't be bothered to read the docs (I mean obviously there are no docs, but thats a different problem)

But, and I cannot stress this enough, having more than one person making similar or related libraries is a disaster. Nothing gets shipped and everything is devoted to "improving" the competing libraries.
Exactly right. Thank you for spelling it out!
> Vendors In Depth

Vendors will always love the phrase 'defense-in-depth' more than they care about assessing whether additional layers of tooling and controls actually provide more defense, because a vague appeal to defense-in-depth is a great way to justify purchasing more security software.

It would be naive to think this doesn't affect the volume of research produced promoting and emphasizing the importance of defense-in-depth either, or how frequently papers on basically any kind of attack end with something that means 'this is why a defense-in-depth approach is needed in XYZ area' even when defense-in-depth is at best incidental to the substance of the paper.

You can trivially tack that on to the end of pretty much any paper about any exploit, which raises the question of how meaningful an observation it really is.
It's a distraction. America isn't obese because milk has naturally occurring sugars.
Windows 11 Home requires you to get a working internet connection to continue. Windows 11 Pro doesn't as of the 22H2 version but it still has dark patterns. For Office you can still use other licensing methods, even for O365, but as a typical consumer getting it legitimately you'll de facto need a Microsoft account.

Using "no@thankyou.com" for your Microsoft account (and any made up value for the password) allows you to skip this requirement in any version of 10/11 as someone got that account banned and the Microsoft workflow bails out since they naturally don't want to force onboard a banned user to a new account. This still requires internet during install though, it just works around needing to make an actual account.

It's a shame how much of a dance the install process has become.
WinRAR flaw lets hackers run programs when you open RAR archives
"[..] this International Standard imposes no requirements on the behavior of programs that contain undefined behavior. "

What you describe fits for "implementation defined behavior".
If you want to write code that works with different compilers, a single compiler with every UB defined, gains you nothing. If you don't need that flexibility, you can just use a language without UB in the first place.
Generally what we see people do is:

- build in CI

- push to a cache (eg: S3-compatible/HTTPS/SSH)

- use the cache elsewhere

In that paradigm, the artifacts live in the binary cache (sometimes called substituter), much like container images live in a registry. This raises the question of if or how to track precise artifacts in use. There is no standard for this yet. I've seen people use tags, branches, separate repos with manifests, DNS TXT records, etc. [ I work for https://floxdev.com/ where we are creating a standard for artifact lifecycle management and distribution called the Catalog into which you publish your artifacts, contact us if interested ].

The key selling point is that the resulting artifacts often have high de-duplication compared to container layers and have good correctness/completeness properties. We also can keep track of how things are built, so SBOM and supply chain information is very good.
Spot on chungy! I wish this was better thought out and implemented. There's a lot of room for improvement in this area.
Jambo mouzugu. Mambo vipi!
NYC-Tokyo over the polar route for a flight crew over an entire year gives you as much as a single full body CT.

A single full body CT of radiation every year for that flight crew.
> ProPublic reports that researchers have estimated that widespread use of backscatter x-rays will cause between 6 and 100 cases of cancer each year among fliers.

> The TSA maintains the devices are within federal safety limits.

I've always "opted out" of backscatter machines. In about half the cases airport staff were exasperated with me. In Australia they interrogated me for "the specific reason" I requested a manual pat-down instead. I made one up.

But my real reason was that I fly a lot and I don't need to be blasted with millimeter wave x-rays for no good reason.
No, a news article discussing something explicit does not always mean there will be explicit content.

Do ISIS beheading news articles always show ISIS beheading videos? Did news articles about the deposing of Ghadaffi show the videos of his body being mutilated? I remember having to see that on Liveleak.

America may be prude as fuck, but that doesn't mean everyone in the coffee shop seeing boobs on my screen understands that this is a news article. I WANT to read this article, but I can't because it's explicit. Sure, maybe that's a point in itself, but as a man, I'm not exactly going to win that societal level battle on my own.
I see this as part of a global war by governments on crypto and end-to-end encryption

https://community.qbix.com/t/the-coming-war-on-end-to-end-en...
Consider vterm instead of ansi-term.
It is a fully-fledged terminal emulator.
https://github.com/akermu/emacs-libvterm
Starlink is only a monopoly in locations without traditional broadband. It's not even a very good alternative in dense locations, where you compete with neighbors for bandwidth. Though perhaps they can serve enough users to influence prices a bit.
Probably a typo, otherwise the writers are very confused?
It sure would be nice if modern CPUs had two sets of integer instructions: one that wraps, and one that triggers an exception on wrap, with zero overhead in non-wrapping case.

Then we could compile all code with the latter, except for specifically marked edge cases where wrap is a desired part of the logic.
for example by using a full fine-tuning it's possible to censor a LLama model.
then people use the same dataset, but filter out guardrails to create an uncensored type of this model.
just google for "llama wizard vicuna uncensored".
> The OP did talk about pulling "policy levers" to change incentives.

This is what we’re afraid of. Those policies will cause immense harm and suffering to people who cannot simply buy the small EVs that policy makers want us to buy. The unintended consequences would be devastating to many.
You owe it to yourself to better understand the plight of those around you. Your experiences are far outside of the norm in the US.
I love how technologists/programmmers/enthusiasts will vehemently argue that EMFs, iPhones, Airpods, and all of the other countless devices constantly bombarding us with "non-ionizing radiation" is "completely and utterly harmless". Meanwhile even the most ancient patriarchal doctors with obsolete worldviews will suggest aspiring fathers may want to avoid having their phones in their pockets 24/7.

No one knows jack shit, as we're finally discovering with PFAS, forever chemicals, etc.

Stick with the earth.
You’re thinking about it backwards

`su` predates `sudo` by a decade doesn’t offer the fine-grained control `sudo` has. With `su` if you have the root password, you can do anything you want as root. With `sudo` admins can configure what commands users are allowed to run as root and could specifically block `sudo bash` from running.
They could show what's popular across the platform, what's new and/or popular in your subscriptions, etc.
Its not surprising honestly. There's a point in a codebase's life where it grows to this size that's hard to put all the moving parts into your head. Bloated, corrupted, every change takes careful caution to make sure it doesn't affect some other part downstream. You might know certain parts are not optimal or efficient, but you don't have the time to stop iterating on other tasks and fix these inefficiencies, let alone revise all the other built on parts that depend on this sub optimal component.

A clean slate on the other hand is a lot easier. There's no vestigial pieces. No dependencies on hastily written functions you never got the time to rewrite the right way. You aren't locked into some version of a library from three years ago, you can use all the latest tooling.The shorter the codebase is in total, the easier it is to grasp the scope of how it all works together and move faster, knowing where other things should fit in a much simpler mental model.
I suppose different people will have different tastes, but I will never agree that this is rude and that you should not ask. You should not be upset when declined, but that is another matter.
You see both sides of the coin often-- people are often too quick to go for a rewrite. But then you also often see the "rewrites are almost never a good idea" camp that dismisses the benefits too quickly.

The reality is rewrites are often appropriate but they need to:
1. Have a clear tangible benefit (or ideally many benefits)
2. Be as tightly scoped as possible to achieve the above benefits. Rewriting everything at once is a horrible idea in all but the most egregious cases.
3. Be as incrementalized as possible.
This is a move from "free speech" to "forced audience."

The vast majority of my blocks are of bots. The ones he claimed he would make a specific point of dealing with, but never has.

There are so many reasons to block. There are people that are regularly harassed because of this that or the other thing. Free speech doesn't mean forced audience, except to Elon apparently.
That's why the author prefaced the sentence with "In effect". The effect in this case is the same as if the compiler had pretended i was initialized to a high value - the loop is omitted.
Oh. I didn't know that. Thanks!
You certainly can do that with TF open source. But YOU are still managing that state.

TFC and CFN do that for you.
> I don't want to manually handle every single error case

I get this all the time from people who are used to exceptions, and it's based on a lack of understanding. If you get an Either<Error, User> from the db, you don't need to handle the errors in every method call in the service layer. You can just call map and that function will be applied in the happy case, no need to handle the Error case. Then, at the resource layer, you can simply

userService
.getUser(userId)
.fold({ error -> HttpResponse.400(error) },
{ user -> HttpResponse.200(user) })

As for Go for HTTP REST APIs, agreed that it simply isn't a good tool for that. In fact, I don't think Go is a good tool for anything - for pretty much every use case, there are objectively superior languages, lol. But that's a whole nother can of worms.
Yeah it’s extremely expensive. Not to mention the tones from it don’t sound far off from a crappy MIDI guitar sound.
The standard also doesn't require UB to have run-time checks, which is probably for the goal of performance. There was an implementation in mind when it was designed.
Gibson and the Acronym guy are BFFs.
I grew up in China and the guess culture was predominant there. It was quite a culture shock after I came to the US. In a training session back when I was in IBM, the VP of marketing told us a story about the ask culture: he was an American-born Japanese. When Lou Gerstner asked him what he wanted, he instinctively tried to be humble. Lou cut him off and said: I can't help you if you don't tell me what you want. Come back in X months when you know the answer. The next time they met, the VP told Lou that he wanted to be an executive, and he got promoted soon. Another thing I learned in the training session was that leaders have different styles but all the executives demonstrated only one of the four key styles: direct and decisive.

As time went by, I found it was much easier to adapt to the ask culture. I also found consistency matters more than the styles. When I consistently ask with good intention, people would not take offense.
Not that I know of, probably something you'll have to dig into based on your use case. I've used Coverity for static analysis, which is great but pricey. We have a corporate license so no-brainer for me.
Why wouldn't the system require each refresh of the session token to require additional authentication? Then a stolen token can't easily be refreshed.
I gotta admit, I was reading through this article thinking "and so you rewrote it in boring old HTML, right. Right...?"
The corruption is just as obvious as the denials.

He bragged about leveraging foreign aid to get the lead investigator fired as part of an effort to fight corruption in the Ukraine. Think about. If your trying to fight corruption, and you have evidence this lead investigator is corrupt, couldn't you just present that evidence to get them fired? Unless of course the corruption goes higher. In which case, the futility of the action is obvious.

The defense doesn't make sense on the merits. The investigator who got fired claims it was because of who he was going after. I don't know if he is honest or corrupt, but I do know that Ukraine claims he wasn't fired or pressured to resign but rather resigned on his own. So someone can't get their story straight.

Media outlets who went out of their way to say there was nothing wrong here all pretty much acknowledged that it at least 'looks bad'
> You are of course correct that NULL dereference checking is would incur a performance penalty at runtime. However, the compiler should be able to catch some subset of cases at compile time. At the very least, there could be a mode where it could at least warn you at compile-time that some dereferences could result in SIGSEGV.

SIGSEGV on null pointer deference is not the problem. It's actually fine, in the sense that it predictably terminates the program. The problem is that modern optimizing compilers don't guarantee that SIGSEGV will happen; they may rewrite your program to do insane shit instead, as the example in the blog post shows. So we don't need NULL checks at runtime; we just need the compiler to stop doing insane optimizations.
Why would anyone need bolt cutters to extract the drives?

I've had PC cases that had eyelets for a lock. You'd have to get through that before "unscrew(ing) the drives".
> Are there other languages that do this so nicely? It's the perfect blend of OO and functional.

In Lua, you have regular, non-object functions, but you can also create a callable table using metamethods, and keep whatever data you have with it. Add to that the colon syntax sugar (implicit self vs explicit self) on table methods and I think you have a beautiful "opt-in" OO story without the unintuitive `this` business from JS.
With six people plus a week’s worth of groceries for six, forget small cars—-there aren’t that many vehicles period. I’d think expanded length sport utility vehicles (e.g. Chevy Suburban) is going to be about it.
You can also make it yourself assuming you have a smoker. It's not terribly hard either.
> There's no such a thing like "side-effect-free" code.

This kind of like “Ceci n'est pas une pipe.” In that it’s useful to remind people that there is no such thing as side-effect-free code, strictly speaking, but as soon as you remind people, you go back to talking about whether a particular piece of code has side effects. Someone points at object depicted in the painting and asks what it is, and you say “It’s a pipe.”

Basically, to reason about code, it’s useful to ignore certain classes of side effects, most of the time.
That’s definitely the high level description of the roles

What I’m asking, is concretely, day to day, what do these people do to move towards that?

What are the tasks they perform to get there?
Everyone is somewhat targeted by the state already... Just not at a pin point level yet.
He said earlier that blocking is like DDoS for the servers. The blocks are filtered as an additional step from the timeline lookups. So when there are lot of blocks, you multiply the requests to build enough tweets for display.

Because people on Twitter are polarized and constantly attacking and blocking each other, and Elon has no money for infrastructure, it has become a problem. And his solution is expectedly dumb.

Additionally it’s bad for business when people block advertisers and blue checks.
> I've been deeply skeptical of studies claiming artificial sweeteners to be harmful

Your body has a certain reaction to sugar.

You give it a different "sugar" but it will be fooled.
> now I only touch nano when I need to de-crappify a vimrc file

You can start vim with --clean to fix your vimrc.
Replying to my own comment. If you are wondering why healthcare is specifically a market failure related to

1) Information asymmetry. Patients do not generally know how to select and shop for their treatment without medical expertise.

2) Adverse selection. Unhealthy people want good healthcare, which drives up the risk pool of "good plans". While insurance companies in general want healthier patients, which often leads to insurance firms to compete to offer plans that only appeal to the healthiest people. (I.e who can offer the most restrictive, and cheapest plans) see insurance death spiral. https://en.m.wikipedia.org/wiki/Death_spiral_(insurance)

3) Perverse incentives. Profitable treatment does not always align with best treatment decisions. This both comes from providers and insurers. See information asymmetry.

4) Monopolistic characteristics: A Monopoly is generally defined by a firms ability to restrict output to reach the profit maximizing production (absent of meaningful competition). Try seeing a specialist on an HMO and you can figure the relation to healthcare. Significant regulatory and market capture makes avoiding with health insurance impossible (including your providers insurance), leading to spiraling costs.
"In fashion"? What?
The undefined behavior I struggle with keeps me from better performance though. I have something like [(uint32_t value) >> (32 - nbits)] & (lowest nbits set). For the case of nbits=0, I would expect it to always return 0, even if the right shift of a 32-bit value by 32 bits is undefined behavior, then bit-wise and with 0 should make it always result in 0. But I cannot leave it that way because the compiler thinks that undefined behavior may not happen and might optimize out everything.
Have you seen the DEI industrial complex? Here is University of Michigan’s DEI admins list and their yearly salary totaling up to $13M: https://x.com/monitoringbias/status/1610728541070426126

What are these people doing?

My fear is that at some point the pressure will release in the form of a revolution if we don’t cure the lazy government and fix it.
Not sure what this context adds, but ok.
I don't know if a person that actively tries to dinner law making deserve a just justice system
Eh, we could kinda resolve the problem by having a government auth system, and you can get some OpenID like response from it. Then private companies could just use that for identification (like in Sweden, a lot of apps have that BankID or whatever its called). We have something similar in Canada in a couple of provinces, but they’re exposed to government portals only.

However bringing that theme into US is a no-brainer because of the distrust in the government or some other issues.
Oh, I bet this is a poor attempt at handling those messages that tell you that you're blocked and can't read them.

I can think of a better way to handle those - keep the block, but don't make a display about it, just like mute already does.

Otherwise people being harassed will be witnessed by everyone except the victim. That is quite bonkers. It just creates another way harassers can harass - by turning people against you without you ever knowing why it's happening.
Another opinion:

https://www.udiscovermusic.com/stories/sex-pistols-music-fea...
> They will probably retire Rosetta2 in a few years, like they did with Rosetta.

Counterpoint: The PPC-to-Intel version of Rosetta was licensed technology (QuickTransit); Apple was undoubtedly paying for it, possibly even per user, so there were financial reasons for them to get users off of it ASAP.

Rosetta 2 was developed in-house by Apple, so there isn't the same hard timeline to get users to stop using it. I wouldn't expect it to survive long beyond support for running the OS on x86, though.
It’s more like we tend to buy with a mindset of being prepared for likely future scenarios.

These are things many people need to do multiple times a year.
I am really not a car person (just need to get from a to b). But as I see large families (3+ kids may be?) minivans and SUVs start to look pretty appealing. Is there a way to address them while not fetishizing size alone? Now large families may not be the norm but Id worry about laws/tariffs penalizing them, no?

For example, to address the front blind spot issue would mandating extra radars and front cameras (and the ensuing cost) be ok? Yes it is still penalizing large families but they may at least be getting a safety feature?
> How much was spent on Russia, Russia, Russia?

A lot, and it produced a lot of results. Because there very much was a there there.

> Still somehow no charges.

In the criminal investigation (the only ones that can produce charges) there were numerous individuals and entities charged in (or in at least one case, in a handoff from) the Mueller investigations, including 25 Russian nationals and 3 Russian companies.

Of course, many acts involved in foreign interference are not within the scope of criminal law, and much of the investigatory energy outside of the criminal investigation (e.g., the Senate investigation producing the bipartisan report on Russian interference) was not directed at criminal law particularly.
cool exercise but its ultimately lubing a square peg to fit in a round hole.

A pragmatic systems programming language with garbage collection and good support for functional programming already exits. Its called Ocaml and really deserves more love.
Yeah, I did get a bit dismayed at "so we rewrote it and kept all the complexity, but used a framework that had the critical feature the old one didn't".
Definitely seems weird to remove functionality that is not fully replaceable by the 'mute' feature. Maybe it's part of an engagement push?
I helped with a study of the compression strength of concrete blocks when I was in high school. It was a long time ago, but IIRC, the blocks augmented with monofilament (it was fishing line) performed well.
> Bancel's haul was largely from pre-planned stock sales,
Won't such hardcore oldtimers use vi anyway? I thought the point of nano was to be like notepad.
If the site doesn't transmit any sensitive data, it does not need HTTPS.
That’s also definitely true!

Some people are lucky to not have significant childhood trauma which means it was never needing to be resolved