skysight-inc/HackerNews huggingface dataset:
Data privacy is a component of it, but there would still be a security threat even if a privacy law existed.

Social media is the real security threat. It's never been cheaper and more accessible to spread disinformation and propaganda, and influence public opinion in any country in the world. Instead of investing in traditional military and physical warfare, governments and companies can invest in troll farms, social media influencers and advertising to spread their agenda. This is a long process, but eventually it causes internal sociopolitical conflicts, weakens the enemy, corrupts their democratic processes, all the while leaving them in a state of confusion as to how they got there, and without leaving a trace that could point to who or what was responsible for it. I.e. information warfare.

The US is not the only victim in this war, and they are also a perpetrator.

There's also no way to realistically stop this, unless these platforms are segmented, and each country runs and controls their own, blocking external access. This will likely happen in the next few years, as the internet itself becomes more fragmented.
Github issues are indexed by google and searchable.
It is the former, a pointer to a const char. A const pointer to char would be qualified as:

char* const
Nice theory but I don't think that's true. They mix the syrup and soda water at or right before the nozzle. The ice just gets dumped from a gravity feed hopper.

If the soda water was dispensed faster it would bubble over even more so then now.

And the same exact dispensers are used behind the counter. Why would you hamstring your employees the same way.
Tinfoil hat theory: it's actually not an accident. Every kind of cultural thing appears twice, at a fixed offset of about 3 generations. First time around it's the original that captures the hearts of a given group and gets them to spend money. The second time around, it hits the purses of those same people, this time just banking on nostalgia.
They automated drink filling behind the counter so they don't need your free labor any longer.
>I haven't seen a billboard that would follow me around before.

I've never seen a png file follow me around either. It's the people who are selling the advertising space that are doing the tracking. They want to show how valuable of a location they can offer you.
I don’t think that’s correct. Sure, filling up a cup with ice can increase the margins on a drink but a hefty amount, but the margins on soda are already excellent, and most customers expect a staff made drink to be fairly full of ice to begin with. I would suspect the real reason is that filling a drink is sort of slow and you can serve more customers if they fill their own drink.
There's plenty of stuff in NYT that should by eyed with extreme skepticism. It's got an agenda and is bending its content around that agenda like every other mainstream commercial news outlet.
Just have to get your shovel and head to the Arctic
You'll have to ask the author that. Now, I'd like to ask the author who cares how you implement 'yes' in Go ;-).
I presume somebody had a need, and scratched the itch.

With modern systems we can have 8 channel RAM and 128 PCIe lanes to feed a system stuffed with NVMe drives. The amount of throughput that can be obtained is nuts, and at that point all sorts of weird things can become an unexpected bottleneck.

This applies even in consumer systems. Suddenly your game loads far slower on a NVMe than it could because it never occurred to the programmer that instead of the disk, the JPEG decoder can become a bottleneck when you can read compressed data at 7 GB/s.
Is the Milky Way’s rotation curve declining?
> "McD fries just aren’t the same when delivered!"

Pro tip: reheat them in an air fryer.
Shareholders are not in management chain.
So, the problem is that DKIM/SPF doesn’t check end-to-end invariants, and instead checks a property that few end-users understand, and that zero end-users care about.
> :

Meant to be ‘::’, of course. (This abomination can only compete with the ML’s double semicolon.)
I maintain a lot of packages consumed by thousands of engineers internally at my job.

We don’t have super rigid standards in many ways, however that experience has lead me to wonder why so many engineers are struggling with dual support or cjs and ESM.

That said, none of those packages are redux level of downloads, and imagine you hit more edge cases than I do in that

Edit: originally stated hundreds. Turns out we’ve grown enough that I can say thousands now
Revolutionizing Lithium Production on a String
You can, but the modern stuff (in the last decade or so) have made it so much nicer and more fun to work with.
In British English, 'artic' is short for articulated lorry, which is what we call a semi-trailer truck (I think). So the title suggests a secret truck full of code, out there on the road somewhere.
What issues are you running into? We added support for setRawMode in Bun v0.8 (a month ago) and that addressed many issues with stdin and readline.
I am always happy when I look back on the monobugz days. I think it was a formative experience in evaluating claims like well, of course it works, so many other people already use and depend on it. O RLY?
yes C lines of code: 112

yes Go lines of code: 9
I never liked the McPlant burger in the US. Much worse than Beyond Meat or Impossible Burger.
vLLM has healthy competition. Not affiliated but try lmdeploy:

https://github.com/InternLM/lmdeploy

In my testing it’s significantly faster and more memory efficient than vLLM when configured with AWQ int4 and int8 KV cache.

If you look at the PRs, issues, etc you’ll see there are many more optimizations in the works. That said there are also PRs and issues for some of the lmdeploy tricks in vllm as well (AWQ, Triton Inference Server, etc).

I’m really excited to see where these projects go!
Related:

Decoded: GNU Coreutils (2018) - https://news.ycombinator.com/item?id=29871037 - Jan 2022 (7 comments)

Decoded: GNU coreutils (2019) - https://news.ycombinator.com/item?id=26411908 - March 2021 (38 comments)

Decoded: GNU Coreutils - https://news.ycombinator.com/item?id=20328650 - July 2019 (55 comments)
I always wanted something to watch where their unmarked cars are.

Speed traps are the worst.
How privileged is it to say that a $1500 loss is "hardly worth noting"? Median take home pay is under $45k, so that's more than half of the median paycheck gone in a single mistake.
The yearly fees are the costs of the cards and the benefits they offer. Typically only cards with valuable perks cost money.

Could you not just pay the balance each month?
From what I recall about 2% of people who got the procedure died. On the other hand actually catching smallpox had something like a 30% fatality rate, so the procedure became fairly popular.
@jarred will bun work with pm2 out of the box?
Dodge v. Ford: What happened and why? (2021)
Nice work, Ruyi!
You've definitely taken typescript mastery to a new level. It was great to have you intern with us.

If anyone else is interested in an internship or full-time position in typescript: https://www.uncountable.com/hiring/hn
That is a great idea. It also crystalizes the syntax so organisations other than MS can invest in building tooling as the target wont be as fast moving.
Related:

“If you don’t make it beautiful, it’s for sure doomed”: Arctic Code Vault - https://news.ycombinator.com/item?id=32964947 - Sept 2022 (1 comment)

GitHub Arctic Code Vault: Tech Tree - https://news.ycombinator.com/item?id=24099167 - Aug 2020 (95 comments)

GitHub buries 21 TB open-source code in Arctic vault for 1k years - https://news.ycombinator.com/item?id=23891540 - July 2020 (64 comments)

All 21 TB of code on GitHub was moved to cold storage at an actual Arctic vault - https://news.ycombinator.com/item?id=23879959 - July 2020 (3 comments)

Arctic Code Vault Contributor - https://news.ycombinator.com/item?id=23871126 - July 2020 (71 comments)

The GitHub Arctic Code Vault - https://news.ycombinator.com/item?id=23860659 - July 2020 (89 comments)

Long Now Partners with GitHub on Long-Term Archive Program for Open Source Code - https://news.ycombinator.com/item?id=21881964 - Dec 2019 (2 comments)

GitHub Arctic Code Vault - https://news.ycombinator.com/item?id=21597527 - Nov 2019 (2 comments)

GitHub Archive Program - https://news.ycombinator.com/item?id=21527667 - Nov 2019 (245 comments)
I always found it amazing that the amount of time it took to query their database was the exact amount needed to complete the animation.
Go look for some mines the desert sometime. 100 years here is nothing, wood barely decomposes and iron lasts basically forever.
Mine did that, my spending increased due to gradually "onboarding" more expenses to the CC from my debit card and they pretty much immediately bumped my limit so I would stay at around the ideal utilization for credit score purposes.

It was pure win for me now that I'm buying a house and have a >800 credit score with zero installment loans. Have never paid my CC company a dime of interest. And oh god why would you? The interest rate is unreal.
I'm glad it's unappealing because it's a deathtrap for health, but growing up it was a friendly place for kids with the clown and cartoons, even some animatronics and interactive electronics here in los angeles, later the playplaces, now in their struggle to fight starbucks of all things they look like tombs, mausoleums of their fun past. Good riddance I guess? Can't deny they're consistent and everywhere and addictive.
I don't usually comment on downvotes and I have just under 5k karma so it's uhh, just no thing to me typically..

It's also against the guidelines, but again 5k karma...

That said, kinda curious now downvoted into negative for sharing my, extensive, experience creating module type projects.. Hrrmmm.
I used LD_PRELOAD for patching RCE vulnerability in PunkBuster[0]. They did patch the exploit, but that didn't involve many of the older games they dropped support for. The AC itself isn't effective or even operational for the most part in those, but it still serves as a reliable method of identifying players.

Even their server libraries are obfuscated, and hooking open() turned out to be just easier than trying to patch the binaries themselves.

[0] https://medium.com/@prizmant/hacking-punkbuster-e22e6cf2f36e
I was really bored during COVID lockdown and needed a hard problem. I may say more about metaverse stuff in another place, but don't want to derail the Rust issues.
The dirtiness of fast-food restaurants is something that shocks me every time I go to the US. Things like sticky, rubbish-strewn floors even behind the counter that, as a food-preparation area, especially ought to be kept clean. The staff themselves are often slovenly and morbidly obese.

McDonalds on other continents are noticeably cleaner, and considering that McDonalds has standardized the entire process and technology of operating their restaurants, what is the reason for this discrepancy? Surely it cannot be blamed on the recent staff shortages, as I have noticed this phenomenon since the late 1990s.
Yea this is exactly what I do. It makes everything much cleaner.
They also probably use simulation software like Correllium that eerily simulates iOS seemingly to the extent Apple wanted them shut down. If anything, iPhones would be far more secure if everyone could get eyes on their OS and be able to toy with it experimentally. I suspect they aren't the only actor against such radical transparency at the corporate and governmental levels.
Even if it only sold 5000 copies, I remember getting the DVD in the swag bag for StackOverflow dev days, so it must have reached a pretty big international audience over time.
Reading that article, all I can think of is the bald-faced lies the public was told during the pandemic because they were convenient for steering behavior. My trust in “science” was seriously damaged by that episode.
Or just scp from the server, inside the same SSH session. scp works both ways.
I mean, yeah, I've been in that position, I get it for the poorly configured domains. However, if I set a DMARC policy for my domain to reject, I would expect at least Google and Microsoft who control something like 90% of the email market to respect that policy.

The realist in me realises that there is probably a non-negative number of domains out there with dmarc set to reject but failing absolutely all spf and dkim checks, but this should be their problem, not the receiver's.
This is a pretty great idea for a new DEFCON badge. Track the Truck?
My favorite part of it all is that I described almost the exact scenario she was seeking sympathy for (doing over half of the housework and having to provide solely for the relationship) and her instant response was me being a misogynist who devalued housework, based on her preconceived biases.

It never seemed to click that I was LGBT and describing a relationship with a man.

The hypocrisy runs deep in some.
In the US, Zelle vs. Venmo is comparable to debit card vs. credit card. With Zelle/debit, you're basically mailing cash - it might get lost in transit, your money is gone right away. With Venmo/credit, there's a middleman with a big pile of cash that assumes the risk of money being in-flight, and usually eats fraud/errors as a cost of doing business in exchange for selling data about your spending to advertisers.
TIL: Ignore any job postings by Flexport.
IRS using AI to pursue unpaid taxes of HNW individuals
Ceramic film is used in window tinting and seems durable enough. It can stand the rollers and the elements.

I assume the film for storage will be in a protective housing, but even exposed I don't see a problem.
That's fine that it is not a bug, but it seems like a compatibility nightmare.
Original source: https://apnews.com/article/irs-millionaires-back-taxes-26242...

HNW = high net worth
libnaw uses it to wrap and authenticate connect() and accept() calls.

frida uses it to wrap and inject... anything.

These programs have all been around for quite a long time. I think libnaw has been around since early 2000s at least.
The problem, as always, is that if this is just a single company, then they are going to die a quiet death from not being able to break into the market. If they're a single company selling licenses to their patents and production line, then maybe it'll work.
BTW, the solution for problems like this is complain to CFPB. Banks are afraid of CFPB and complaint will help solve problems.

Zelle has their own instant transfer system, and banks settle up overnight. My understanding is that there isn't ACH transaction for each transfer. Banks have less visibility into Zelle.

I hope FedNow kills Zelle. That should be better integrated. I think Venmo and other payment apps will stick around cause offer useful app.
I'm not sure where this idea that vaccines 100% prevent disease (or infection) came from. The main reason previous vaccination programs like measles have worked so well is they allowed near eradication so most people never even get exposed, or just less exposed in cases like influenza where there is too much mutation or waning to get close to eradication. That's why immunization requirements at places like schools are useful, if you add too many unvaccinated kids to the mix then even some of the vaccinated kids are likely to get infected and sick. More to the point, lots of people get the flu vaccine and hit or miss whether you still get sick (probably less, but still a bit).
> proxychains uses LD_PRELOAD [0] to hook the necessary syscalls [1]

Technically, it uses LD_PRELOAD to hook the necessary libc functions. As, at least on x86-64, a syscall is just a CPU instruction like any other, you can't hook into it through LD_PRELOAD or any other tricks that don't involve the kernel (apart from rewriting the program before you execute it). That's also why it doesn't work on e.g. Go programs, as they don't use libc.
const char* const f() const

is the best!
> It’s not any weirder than promoting rust under discussions about c++

Feels like a straw man? I never promoted Rust, certainly I didn't bring it up unprompted. I corrected someone who brought it up.

> unless you think any mention of rust must be positive.

Again, feels like a straw man. I said nothing of the sort.

> There is pretty much nothing useful, this post included, that can be done with const fn in rust.

I feel like you're simultaneously upset that I corrected your post... but also you're challenging my point, in an attempt to pursue discussion? It's confusing because you're wrong but there's also an interesting discussion to be had - although I think this post covers the general issue of "what is a pointer at compile time" quite well.
Agreed. I'm being hyperbolic when I say "do not ever use Zelle". I'm sure it's fine for passing money between friends. It's just that my version of the $40 lesson had a few more zeros on the end, and so stings a bit more.

For me I only use Venmo because that's what most people in social circles use. If they used Cash App or Apple Pay, I'd use those instead.
When hovering over an item that item is highlighted in pale lavender for only a moment before the highlight moves to the first entry.
commenting for future reference.

that's a great quote.
Smart billboards available through Gannett (largest billboard company in US) and track license plate numbers. I used them in Florida until they were banned in 2020.

Billboards that identify car types are still legal AFAIK.

https://www.bmediagroup.com/news/vehicle-recognition-billboa...
This is general problem anytime there is a person or organization which looks for problems. When a problem is found, an organization has two basic approaches:

1) Acknowledge the problem, prioritize fixing it, and then fix the problems in priority order.

2) Punish the person who reports the problem. This is a very bad idea but it is common. I once worked with a very good QA person. He was pushed out of the QA organization because he found too many bugs. In particular, there was one developer who complained because it took "too long" to test his changes. The reason it took a long time was the QA person was thorough, the software was complex, and the developer wrote buggy code.

More recently, I was punished because I reported web service had no authentication and could be used to access customer PII. My manger's manager screamed at me for reporting this and claimed it was not a problem.

Punishing people who report problems is destructive, and it has been happening for millennia. That is why we have the phrase "shooting the messenger".

I am not sure how you fix this problem. My guess is organizations have to adopt a culture where reporting problems is valued, and also where covering up problems is punished. Even then, organizations always have bad people who try to take the destructive path. I do not think there is an easy way to remove all dishonest, incompetent, destructive, and dysfunctional people from any organization. The best we can do is be vigilant, speak up, and accept we will sometimes be punished for trying to do the right thing.
Dittoing this. I think 'authentic' is a loaded word, as often in a Vietnamese Facebook food group I'm in, there constantly are arguments about what is 'authentic'. Is it someone who lives in country, the same ethnicity, the hometown where the food is from?
I feel like there are far better ways to determine police locations just by finding their other, more powerful, radio frequency footprints.
The first security program I remember when I started playing with Linux around 99 was called libsafe which used ld preload to intercept calls on the fly to prevent buffer overflows.
> This is the same woman who probably taught your SO not to take candy from strangers. I don't think you need to be engaged in social media from a young age to tune your BS detector.

I don’t feel like repeating a specific advice not to take candy from strangers indicates any critical reasoning personally
DBSP: Automatic Incremental View Maintenance for Rich Query Languages [pdf]
Bingo! I love having an absurdly high credit limit for big purchases. It wrecks my credit score for like a month but then immediately recovers once the algorithm realizes I'm still not carrying a balance.
Theorem Proving in Lean 4: https://leanprover.github.io/theorem_proving_in_lean4/

I only had a basic knowledge of first-order logic and set theory before reading TPiL4.
It wasn't easy, but now I can prove theorems in Lean. By the way, I still can't write a program in any language.
If the US Government is worried enough about the data that TikTok vacuums up from its users that it wants to ban that specific app, that screams loudly that the behaviour of TikTok, who have merely followed the path laid down by the likes of Google and Facebook, is a threat to national security.

But since this behaviour has been going on so long, and the US economy is already in such a dire state, laws protecting user privacy (laws that are actually worth a damn) could have a disastrous enough effect on the US economy that implementing these privacy laws could also be a national security risk.

Which is why they tried to ban TikTok rather than actually do the right, difficult thing of implementing worthwhile privacy laws.
I agree, but we’re still talking about five years for a huge company with colossal cash reserves. Surely one person won’t cut it to do all the work, but I’d wager that the person overseeing the Siri department isn’t doing their job very well. Sounds more like there are managerial/political issues rather than technical ones.
"What I'm trying to understand is do companies not think these actions will limit their ability to hire in the future?

As I see it:

- there is higher supply of talent than demand for talent

- offer enough money next time and see all the doubts disappear (come on, there are companies with a terrible reputation that have been around forever and employ tens or even hundreds of thousands of people)

- companies need to survive now before thinking about tomorrow, especially a company like Flexport, which appears to be quite fragile from a financial standpoint.

The relationship between employees and employers, especially when the latter are big companies, has always been more adversarial than cooperative.

In this context, I don't expect my employer's best, and in return I certainly do not give my best. A lesson I learned after having been let go.
It has worked fine for me since then.