skysight-inc/HackerNews huggingface dataset:
I think the situation is:

1. Executable file X is created no later than 7 Feb 2020 23:59:59.

2. X is signed using a code signing certificate J issued by "VeriSign Class 3 Code Signing 2010 CA"[1] and with a validity no later than 7 Feb 2020 23:59:59.

3. X is counter-signed by a public time-stamping service (see RFC3161[2]) no later than 7 Feb 2020 23:59:59.

4. Even if code signing certificate J expires, Windows will continue to allow the execution of X because it is counter-signed by a trusted time-stamping service which attests that X existed at a point in time when the code signing certificate J was valid. Assuming SHA256 isn't broken, an attacker can't just throw millions of SHA256 hashes at a public time-stamping service and then hope to produce at a later date an executable that collides with one of the prior counter-signed/timestamped SHA256 hashes.

5. Windows always checks that X is signed with a valid certificate such as J, regardless of expiry dates and presence of a counter-signature/timestamp. Removal of trust in "VeriSign Class 3 Code Signing 2010 CA" means this validation of X fails, respite X still having a valid counter-signature/timestamp.

6. QuickBooks had a component QBWebConnector.exe that was signed prior to 7 Feb 2020 23:59:59 by a code signing certificate issued by "VeriSign Class 3 Code Signing 2010 CA". Even though "VeriSign Class 3 Code Signing 2010 CA" has already expired, the counter-signature from a public time-stamping service has allowed Windows to continue to execute QBWebConnector.exe.

7. Windows no longer trusts "VeriSign Class 3 Code Signing 2010 CA" and therefore, the old QBWebConnector.exe created and signed before 7 Feb 2020 23:59:59 cannot be executed. It's irrelevant whether QBWebConnector.exe is counter-signed by a public time-stamping service.

[1] SHA256:D0F90BBF6EE8629E4A31CFDBAA2202E324AF2F5F456967DD83CA5B3684C34297 (https://crt.sh/?id=163359911)

[2] https://www.ietf.org/rfc/rfc3161.txt
agile ; community-minded ; efficient

pick one if you are lucky. Those Fortune-12 giants can't do anything "in a heartbeat" .. listen to what that means.. nonsense
There's also a fantastic and surprising small implementation of work pools in the "par" package in the Go source.

Extracted here https://github.com/hofstadter-io/hof/tree/_dev/lib/gotils/pa...
Just to be extra careful.
"And I hope they find new jobs soon."

Where, exactly? If everybody is 2-5x overstaffed and is cutting people, where are all those people going to go? Form startups to sell things to people forming startups because they were laid off?

People like Nat and Musk want people burning themselves out with overwork and blame organizational and management issues on people not working hard enough. The truth is at most tech companies the real organizational waste is bad leadership and poor direction, people not having clear goals and work, and burning too many cycles trying to compensate for organizational dysfunction.
The tech is here to serve me. I am not here to serve the tech. If it makes my life harder, I'm not using it. That's not because I have "stopped learning".

And, frankly, I don't care if it requires the company to have more staff. (They're not "extra" staff, either - they're staff the company had before they tried to shift everything to the phone, and the company hasn't found a way to lay off yet.)
I disagree. You can’t dictate which tools someone should [not] use to amplify fantasy if it doesn’t affect you. Tbh that “right to fantasy ends at the border of their skull” sounds too oppressive to appeal to ethics.
You're right. I should've distinguished between immigrants and refugees, and backed it up with data.
Everybody knows relational databases don't scale because they use joins and write to disk. Relational databases weren't built for Web Scale. MongoDB is Web Scale. You turn it on, and it scales right up. Shards are the secret ingredient in the Web Scale sauce.
> ITAR security is part of the cost of doing business.

To amplify this: so is compliance with non-discrimination law, and, to the extent the two interact, the cost created by the interaction.
I'm sure this example isn't new at all but it's the first time I've encountered the argument phrased this way and I find it incredibly compelling. Looks good, smells bad is another one (that probably happens more often).

It did get me thinking about different senses and how I prioritize them. Given that humans strongest sense is visual, it's interesting to me that the priorities of what to trust seem opposite of my expectations. It seems to me that visual signals are seemingly least "trusted" compared to the other senses. As if the logic goes, "my sense of smell is so bad that if it detects danger, it must be very dangerous".

Similarly, I'm sure dogs can smell rotting flesh long before meat is unsafe.
> major cities are often blue (largely linked to their history of immigration)

Citation needed, this has not been true of most blue cities I have lived in
It's "unnatural" because it was finetuned on generated data using another model, almost certainly gpt-4 (whose TOS forbid this).
I was there. Lots of flies like turds, too. It was unnaccesible, CPU hogging and propietary. It was a dick move against blind people for instance, and for text browser users.
Chassis intrusion is almost always just a small switch pushing against the side panel of the case. And yes there's a million ways you could bypass that.
> Is this "period" measured in statements or computer time?

It sounds like computer time is used now.

> So the default behaviour now is to nonetheless "catch" infinite loops by default? Why not make the default behaviour to just notify a user by emitting a message after some time (as described)?

Because lots of builds don't have a user. Having the user have to time out rustc because of this would be frustrating.

> If rustc "catches" infinite loops by default, how is backwards compatibility preserved with respect to `const` functions?

As long as the time is much larger than it takes to handle the old statement limit it is preserved.

> If I split one statement into two in `const fn`, do I break BC?

The old version might have prevented your code from compiling as mentioned in the notes.

The new version should in theory allow it if the unsplit version worked since it is based off compilation time.

Also there is an opt flag where it will go infinite
And thousands of animals also die due to industrial agriculture.
This isn't germane to the conversation at all, the budget under discussion is compute time.
Yeah but what about the really big viruses??
I don't know whether "only chronic underperformers were laid off" is true or not, but...

It sounds like a meme that a big company might want to have internally, if they were trying to both reduce regretted/uncontrolled attrition, while also lighting a fire under people who the company thinks are complacent.

But the company would not say that publicly (nor want employees to say that too loudly), because that would be a big liability, defaming tens of thousands of people while they are job-hunting. Also, a jerk move.

Regardless, I'd normally expect any big company layoffs to likely include people that the company or some layer of management has wanted to get rid of (for various reasons, not all the fault of the employee). But layoffs will also hit people based on what project they're on, what department, what role, and simply because their manager was given a target number to reduce.

I also know of multiple high-performers who knew/assumed layoffs were coming, and already wanted to leave, so quietly put in a word with a trusted manager/exec, that they would like a severance package when the time comes. (And then the manager could keep another person or two they would've had to reduce otherwise.)
Is anyone "originally" from anywhere they live now, really, except maybe East Africa (at some point in time)? Anglo-Saxons came from the continent, "Americans" from Europe, Africa and elsewhere, Native Americans from Asia, etc.
So, where is Andrew's x/twitter?
I've seen this argued a lot but is it fact? OpenAI was able to train on data from other platforms and surely, those platforms weren't letting their data go if they could help it. Unless some new laws have been passed, I don't think OpenAI can legally prevent others from using their data to train models. OpenAI can't have their cake and eat it too. After all, any content generated by AI can't be copyrighted.
> There was an unbelievable discussion on whether they should allow Palantir to continue to work with them because they Do Bad Things (TM).

Well, since it's community driven, this makes perfect sense. Freedom of association and all.
Meanwhile, that friend is calling everyone whatever he likes. England: İngiltere, Germany: Almanya, London: Londra, Munich: Münih.
2033 (planned launches in 2027 and 2028). Samples have already been collected.

We have brought extraterrestrial samples to Earth before.

https://mars.nasa.gov/msr/#Facts
> Figuring out what "easier sandboxing solutions" are actually secure and aren't just snake oil is a much taller order.

It shouldn't be for a tech savvy user. I'm sure there are plenty of articles covering this from reputable sources.
I learned a ton about Java and pragmatic algorithm development from reading Dagger (https://github.com/square/dagger) and porting it to C#. It's small enough that you can grok it in a reasonable amount of time, but sophisticated enough that there's a lot to learn. (Yes it's deprecated in favor of Dagger 2, but the latter is a tougher slog IMO)

Actually most of the big Square OSS libraries are great to read - okio, okhttp, picasso.
> Don't copy and paste the same implementation x times because that way there's only one place to fix it.

But also sometimes it makes more sense to copy and paste over trying to fit an abstraction where it shouldn't be. :)

I think the purpose of questions like the ones by OP is not to figure out "rules" (which are useful only for beginners) but to figure out where and why rules were broken. Sometimes (often) the answer is time, but that in and of itself is a useful example.

Good intermediate (I suppose Sr. in our industry) level code is notoriously difficult to find examples of and mentor toward.
Because the market is kinda dumb, and it takes quite awhile to eat an elephant.

C.f. Bogle on "manager's capitalism": https://johncbogle.com/wordpress/wp-content/uploads/2019/08/... and similar things - much (too much?) of our "value" is financial shell games.
I read the title to mean "a camera crushed a lidar sensor which caused a startup to go into administration"
Tesla FSD is not autonomous anywhere. It operates 100x-1000x worse than Waymo and Cruise which are themselves still inadequate by a factor of 10x-100x for safe general commercial deployment.

Saying that Tesla is trying to solve a harder problem when they are a factor of 10,000x from solving the “easier” ones is the height of wishful thinking.

Besides, Waymo and Cruise are solving the general problem. The baseless assertion that driving the breadth of a city like San Francisco or Phoenix is somehow not representative of general driving is ludicrous on its face. Humans who learn in one city generally have the ability to drive in most other cities. The skills are largely transferable.

Waymo and Cruise take a slow and measured approach, validating in a well defined and constrained domain not because they could not operate everywhere 1,000x better than Tesla FSD, but because allowing a system only 1,000x better than Tesla FSD on the road without careful supervision is fucking criminal.
Except that eventually we do get hominin fossils there later. And I for one haven't heard of a lack of other fossils from the same time period.
I personally haven't had much of a problem other than where I now live doesn't have the best service indoors.

Another thing that I really liked was when I was traveling in Europe, I had free basic internet and texts. This was NOT the case with when I had Verizon. They just send you a text when they detect you there, tell you what is free and what costs extra, and you can use your phone like normal.

I even got a local esim with them when I was in Europe more long term (it was surprisingly cheap to get a dedicated European line). I originally got a phone that could handle a physical sim and additional esims for this reason.

Don't know much about the company other than that.
In the early 1980s, I inadvertently agreed to produce a 100-page manual for the student programming environment I had designed and implemented at the University of BC. I stupidly decided to do it in TeX. The stupidity here was that (a) the only laser printer on campus was in another building and (b) the TeXBook didn't exist yet. All I had was a listing of a late prerelease of the Web source of TeX, along with some of Knuth's writings about TeX77, which was a substantially different system. I managed to do it, including formatting much of the manual in the style of Unix man pages (the environment itself lasted for several years, until mainframe timesharing for students went away for good). When I finally got my hands on the TeXBook, I found that I had learned much about TeX, including a few things that weren't so :).

Knuth's programming style is highly idiosyncratic, and there are many points with which I'd disagree. Furthermore, the choice of Pascal required all sorts of strange compromises. That said, I highly commend reading the source of TeX, to see how a brilliant computer scientist attacked a problem that is not nicely structured, using very restricted programming tools. You will not get much that you can copy into your programs, but it is an excellent, well-documented attack on an interesting and complex problem. (By the way, Knuth's TeX was written long before modern typesetting things like Unicode, PDF, and OTF fonts; you don't want to use Knuth's TeX for modern work; I use LuaTeX. But Knuth's version remains as a useful subject of study.)

Another good thing to study is Lions's commentary on Unix V6. This is interesting because it shows many of Unix's key abstractions implemented in a few thousand lines of code.
This is a non-issue for me, as I use LUKS2 (the recent version of LUKS which is much better). If I need to use Windows, for whatever reason, I jail Windows in a VM typically to use certain software that has no Linux equivalent.

I don't trust Bitlocker. Read somewhere Bruce Schneier uses Bitlocker for his daily computing, but I still don't trust it. After all, this is Microsoft we're talking about, who are in cahoots with the NSA, and Redmond has NSA on speed-dial. Avoid Bitlocker if you really want to protect sensitive data.

(If you are going to use LUKS, use LUKS2 with a seven word passphrase). Currently this is the state-of-the-art for encrypting disks.
I've had that on rare occasions, but only when coming from a VPN IP that was really burnt. Never from my own, where it just seemed I did too many captchas in a short period of time.
Lead dev here. We've run a couple of benchmarks internally just for kicks. To create a fair comparison, you have to run the Hotspot JVM with the -Xint flag, which says interpret only. Right now our performance is anywhere from 15-25% of the speed of Hotspot with -Xint on small benchmarks. We figure that the use of go alone creates some important portion of that overhead when compared with the C++ of the Hotspot JVM. We're guessing that a well-optimized Jacobin interpreter will eventually get to 50-60% of the Hotspot's -Xint speed.

But we first want to get feature parity, before pivoting to performance. When we have feature parity, we'll run the Computer Language Benchmarks and post the results. That'll be fun to see!
It's backwards compatible because the old behavior was to simply make long evaluations an error every time. The new system gives you the option to allow a long evaluation if you opt in
The English alphabet does not have ü, so this is incorrect.

Turkey insisting on using a name like is analogous to calling Germany Deutschland or China 中國.

However, that doesn’t mean it’s not an interesting case of an authoritarian trolling the west.
Aye. A similar rite of passage: Any admin who hasn't nuked a server yet isn't working for long yet, or at their effective limit and is too careful.

We all have a few of these. My first one was a jenkins node with a "mv $WORKSPACE/ $WORKSPACE/bin" and no "set -u" :) Or accidentially wiping all SSH keys from a server due to a typo in the config management. That was fun.

But it's a good test for the mistake culture of the team and the resilience of their infrastructure. We had juniors nuke systems and no one but us and the monitoring noticed besides maybe a short hickup during a leader failover. That's pretty cool - and also a good horror story in a few words: "When you start ansible, and 3 minutes later on-call says 'Hi.' on slack".
What is wrong with their sex culture?
Yes, the answer is always, it is language not math. I hate when people die on grammar hills when English is so full of exceptions it is easier to just accept that just about anything goes
No. Erdoğan started advocating for a switch to Türkiye a couple of years ago, and the UN recently adopted the Turkish spelling. The US State Department uses both spellings, while asserting (sensibly) that Türkiye should be used in "formal and diplomatic contexts." [0] English Wikipedia still uses the established English spelling. [1]

Some Turks I know seem to think this whole thing was mostly cooked up as a distraction from other issues that have come up or worsened under Erdoğan's leadership.

[0] https://www.state.gov/countries-areas/turkey/
[1] https://en.wikipedia.org/wiki/Turkey
Ask HN: What is this website for? (shopping.com)
I ran across a link that bounced today while looking up an unrelated topic and ended up on shopping.com where I was surprised to see the content not being what was expected. It appears to be an unstyled site listing items for sale, but then.... nothing? I'm curious what HN's take is on this, or maybe you all know the story behind how the site took its current form.

Evidently on desktop, it's a completely different experience.

This is what I see: https://github-production-user-asset-6210df.s3.amazonaws.com/96031819/263050011-79808c98-dcd7-416b-b93a-57d01777208b.png
I've said this before and I'll say this again: Space is not a amateur game.

I see a lot of young SV types thinking they want to build a deep tech space company. And they can. But it requires a couple years of deep training in of aeronautics and physics before you even know what's going on.

Elon for instance spent years studying space on his own before launching SpaceX. Elon's at a different level, but we can at least learn a few things from him and SpaceX.
I doubt that. For companies using HashiCorp products just to manage their internal IT stuff the license change only affects that if their business is providing products or services that compete with the HashiCorp products and services they use.

I would be surprised if more than a tiny fraction of their customers do so.
Cryptocurrency is, in a sense, a bottom-up tool against top-down state control of a finance system. This is not strictly a good or a bad thing; just a thing.

If the people of a country have a "common law" underlying their bottom-up interactions, that already works on its own as a basis for a productive and growing economy — but a totalitarian state has imposed top-down laws that interfere with that productive economy — then crypto will help "route around" that totalitarian state, and thereby help the economy.

If the people of a country include a large criminal element that would forcefully put themselves in the position of rentier middleman, extracting all margin from interactions in the economy for themselves and so starving the country of growth capital — and the state has imposed top-down laws that interfere with that rent-extraction, in an attempt to get the economy going in the right direction — then crypto will help "route around" that well-meaning state, and thereby reinforce the criminal capture of the economy.
Arctic sea ice has been quite stable for the past 100 years but has recently begun to shrink rapidly. I imagine scientists might be worried that the Antarctic might be about to start seeing a similar change in behaviour.
Performance oriented code can be hard to maintain. Writing things in unintuitive ways to try to coerce the compiler into doing fewer instructions can result in code that's harder to read.
Was that before Intel spun it out? I can see people being willing to do that build if Intel was seemingly on board. Today things are pretty different.

Modern HPC mostly means GPU compute and tons of data shuffling, but point taken. CPU bound jobs aren't going to stress the i/o, so you probably could have done 100GE for less. I'm curious what you did for storage but I'm guessing with CPU-bound that is again much less of an issue.
NetBSD source. Exemplary for C code and astoundingly well documented.
Correction:

US Government: You have to careful about potentially leaking export controlled material, or your employees will be held personally responsible and go to jail. Also, you have to comply with non-discrimination law while doing that.

SpaceX: Okay, so we’ll ignore non-discrimination law and excuse it as “being careful about potentially leaking export controlled material”.

US Government: WTF?
Clickbait title fooled me.
I probably have to take training classes every year as a hiring manager about what I can and cannot ask in the hiring process, and not asking citizenship and anything beyond "Are you eligible to work in the US?" I forsee a bunch of these training classes in SpaceX's future.
Who would pay for lawyers if we did not have absurdly convoluted laws?
I'd checkout Racket: https://racket-lang.org/ It's got a nice UI for starting out and getting good error reporting. It's also well documented.
I've redacted my statement since it is no longer relevant, interesting data. I wonder how refugees would vote comparitively to immigrants, one would assume it would be close but I could be entirely wrong.
Right but if you look at data and scientific consensus rather than focusing on the media's catastrophizing, you see a much clearer, consistent image of a real problem.

Also what's this preferred left wing candidate who promises to alter the means of production..? If you're talking about the US, all potential candidates for both major parties are in favor of a capitalist mode of production. Not that this would have any impact at all, even if there were major parties which tried to use climate change as an argument in favor of socialism, that would have no effect on whether or not climate change is a real problem.
explain pls
> from my totally uninformed bystander perspective, there's been a sharp drop in people working on the language and compiler full-time since around Mozilla layoffs, and Rust still hasn't recovered from that

In terms of number of commits to the rust-lang/rust repo, activity peaked in late 2019/early 2020, whereas the Mozilla layoffs took place in late 2020. Activity since late 2020 has mostly stayed stable, and remains well above where it was at any point prior to 2018: https://github.com/rust-lang/rust/graphs/contributors

In addition, I know of several former Mozillians who remain employed to work on Rust, including one who heads the Rust team at Amazon.

As far as the number of contributors to each release, it's currently hovering around an all-time average high (although a handful of past releases have anomalously high peaks): https://thanks.rust-lang.org/

The reason that progress appears slower these days is because the low-hanging feature fruit has mostly been plucked, and what's left are the harder problems. Maintenance tasks don't make for very interesting release notes. In addition, as the language matures much of the interesting feature work has shifted from the compiler/stdlib to tooling like Cargo, rust-analyzer, etc. (whose activity might not be reflected in the above graphs).