skysight-inc/HackerNews huggingface dataset:
From a package maintainer standpoint, trying to support both ESM and CJS in the same published package is a _nightmare_.

I wrote an extensive post a few weeks ago detailing all the pain that I've dealt with and problems I've run into this year trying to modernize the Redux packages to fully support ESM and CJS:

- https://blog.isquaredsoftware.com/2023/08/esm-modernization-...

I've gotten a lot of feedback from other maintainers saying they've run into similar issues.

Also had a couple podcast discussions following up on that topic:

- https://syntax.fm/show/661/supper-club-shipping-esm-with-mar...

- https://changelog.com/jsparty/290
Only Berkeley and UC Merced have started. The rest of the UC system is on the quarter system and Fall Quarter doesn't start until late September.
You're conflating the idea of using channels with green threads. They are different, you can easily use channels with async/await and global state/mutexes with green threads.
People who do not know what they are doing should do research before using it in production.

Edit: Of course, since this is what "unstable" means, right?
So it boils down to "we shouldn't attempt to build new security stuff because what it's built on could have vulnerabilities"?

Time to go back to kernel mode everything I guess. Just run everything as root, get rid of sudo.
"It's not perpetuating stereotypes".. ok

https://techpolicy.press/researchers-find-stable-diffusion-a...
A legion of Robot Chefs is coming to Colorado with meatless sausage
Also people massively underestimate how great the graphics libraries provided by Apple are. The thought of doing a lot of this stuff in WebTech gives me heartburn.

Like our main compositing tool on the web - Canvas is basically Quartz, which I love for that reason but there's a _huge_ amount of power that you get from native Toolkits that have been developed in the intervening years.
The FAA didn’t release the full mishap report, citing “proprietary data and U.S. Export Control information,” but it did specify that the closure of this investigation “does not signal an immediate resumption of Starship launches at Boca Chica.”
https://techcrunch.com/2023/09/08/faa-recommends-63-correcti...

https://www.faa.gov/media/70901
With Procreate having been the longest-running one-off purchase app on the App Store that I know of (I literally bought my copy in 2010) I was on the edge of my seat to see whether they were going to finally follow the subscription trend for Dreams.

Even though I haven’t had a particular urge to get back into animation again, I think I’m going to have to buy this just to support this business and as a thank-you for 13 years of free updates to Procreate. And to do a little flipbooking for fun.
Everyone's situation is different. I got 1 kid. I pay around $110/mo for childcare. No car. I pay around $100/mo for transport. I assume the kid's mum pays the same for transport. We're separated now, but she has a career because her CV isn't just housewifery.

I really can't get behind the money-saving arguments about food etc. (mostly in other comments even though my post is here.)

I mean, I buy meals during the day because I'm rich and lazy. Nothing's stopping me from storing leftover dinner in the fridge and taking it into work the next day.

But if I wanted unrealistic comparisons between food costs and employment, why not child care too: I save so much money and time by having my kid fed at daycare instead of having to feed him myself.
Also known as "Chindogu" and "Most Unuseless Items"

This classic book of them has been around forever: https://wwnorton.com/books/The-Big-Bento-Box-of-Unuseless-Ja...
That sounds .. interesting. Are they REM dreams?
Bun 1.0
Wow this is a blast from the past. I remember watching this in college around 2008 or so, and it leading me to apply for their internship program. I guess as marketing material it worked!

I didn't get the job, and don't honestly remember anything about the technical side of the interview, but I do remember them being very kind and gracious. I happened to be studying abroad in London and they didn't bat an eye when they had to buy what I'm sure was a way more expensive ticket than usual for the on-site.

Thanks for posting this - very interesting to see where everyone ended up!
n=3 for me.

It's also "featured". And the featured one is an example of what I'm talking about.
I just tried this. It seems to work OK, though it just gives empty missing boxes for a few things, like text files, python script, etc.
I think people's heuristics naturally change. You could spend entire evenings watching television a couple of decades ago. Now too, but now there are competitors. (Unfortunately you can also scroll while in bed and really most places outside your living room.)

There is probably at least a million times more informational content now compared to three decades ago. But is that information filtering/overload a problem which is proportionally bigger? Not really. The major “problem” is that people have changed their heuristics from trusting the Mainstream Media to a wide variety of more and less legitimate sources. So before people might think “I don't trust this because a journalist didn't say it” while now they might think “I actively distrust it because a journalist said it”. (Of course that's just one example of many heuristics now that we are all so “fragmented” (Oh no! Filter bubbles!).)

On another note: these academic/straight-laced approaches to the problem (or supposed problem) feel just like being back at school. You are given homework which is ostensibly about making you an independent “citizen”, but the coursework and framing is so narrow and top-down that it's more of an exercise in being instructed by credentialed experts. Maybe school really is (and ever was post-Prussian Empire) a factory for conformity.
Check out some of Dr Russell Barkley's videos on the topic https://youtube.com/@russellbarkleyphd2023?si=w9T2XhfEn-K73q...
But do they balance out Jira?
TPM isn’t about security, it’s about DRM
> It doesn't make either "benign."

It's literally benign by definition.

benign
adjective

a: of a mild type or character that does not threaten health or life
b: having no significant effect : harmless

Provide evidence or argument that it's not benign.
> Musk is a private individual, and Starlink is a private company. They are not in business to fight wars.

Thank God private individuals and private companies don't fight wars. It is difficult to imagine a world where that happens.
There is a time any place for sharing state and data. However it is extremely complex to make that work, and so if at all possible don't. In general the only time I can't use queues is when I'm writing the queue implementation (I've done this several times - turns out there are a number of different special cases in my embedded system where it was worth it to avoid some obscure downside to the queues I already had).

When you need the absolute best performance sharing state is sometimes better - but you need a deep understanding of how your CPUs share state. A mutex or atomic write operation is almost always needed (the exceptions are really weird), and those will kill performance so you better spend a lot of time minimizing where you have them.
How many will survive and make it to maturity? Planting saplings is easy. Having them mature is more difficult.
> the signature of the BIOS is checked against a public key whose hash is stored in fuses

> Each of dozens (up to hundreds) of UEFI drivers written by various OEMs with varying levels of competence and care are loaded

Doesn't the BIOS signature encompass those drivers? Put another way, isn't the BIOS vendor attesting those drivers are non-malicious with their signature?

I think the TPM will turn out to be a net negative for consumers since it's going to get used to get used for attestations users can't control (ie: against the will of the user),
but there are some benefits. Having a BitLocker key unlocked via a PIN where the TPM can protect against brute force attacks is useful for me. That alone covers most of my threat model which is having my data extracted from a lost or stolen PC.
Not sure how I was supposed to get that from your comment or why you think kerosene is a better solution when burning it in jet engines still puts greenhouse gas straight into the atmosphere? I feel like I missed some big piece of your argument here.
This is much more interesting than I expected it to be from the headline, and I don't think it should be flagged. (I wonder if people flagged it on auto-pilot based on the headline.)

Since it's clear from the top-level comments that most people aren't reading this far: This article is using "housewife" to mean one member of a two-adult household focusing mostly on home-related work rather than typical money-earning work, and the article (eventually) takes pains to point out that this could be a man (though usually isn't).

Personally, I think she's right that having at least one person in a household not work full time for pay would be a much better setup if it actually worked the way I would want it to, especially (but not exclusively) in households with children. However, I don't see any path to it working the way I would want it to, and for most people I know, the way it would actually work is less desirable than the status quo.

Here's how I wish this could work:

- Both people work part time and share the "homemaking" responsibilities. This is covered in the article along with the reasons this doesn't work for most people in our current society. But this is what I'd like to do if we were financially independent.

- People take turns working at home or for pay. I would love to switch back and forth. I get tired of both kinds of work and it would be rejuvenating to do one for awhile and then the other. But again, this doesn't work for most people, because it's not what employers want (it is just a different version of part-time work after all).

- No gender-based stereotyping of who "should" be doing which kind of work. This one is possible to overcome on an individual basis by communicating really well about the expectations for both people involved and by conscientiously not caring what other people think. But still, enculturation is hard to overcome, and I know both sides of the "non-traditional" way of doing this often face different kinds of struggles with it.

But if those things aren't plausibly achievable in a widespread way, then I think the status quo where most people try to do both work for pay and work at home (and do kind of a bad job of both) is preferable to the "traditional" setup of having strictly a woman do all the work at home indefinitely. Very few of the women I know would thrive with that lifestyle, and few of the men I know would actually prefer their partner live that lifestyle.
Side note -- although it's noted by many people here -- to say that I'm very pleased to see ... some? seeming pushback against subscription-based models.

The other example that comes to mind for a very polished and well loved app is Koala (a great audio sampler/sequencer) [0], which sells for a flat $4.99.

Subscriptions have advantages of course, such as providing developers with a more sustained income vs one time purchases which necessarily mean a diminishing hourly rate when you take into account indefinite support.

But still. I'm hopeful.

[0] https://www.koalasampler.com/
Ohhhh I misunderstood. Thanks for clarifying!
Even settings app on iphones has adds.
Wow 315,000 metric tons. That’s the yearly CO2 output of 21,000 Americans!
Version 2 seems harder to process, like it's using words you wouldn't see as often as the original version. Are you asking it to make it "sound smarter" or something?

version 1:

> running my own writing and sometimes random thoughts through it to create actual writings

version 2:

> refining my own writing and crystallizing fleeting thoughts into more coherent prose
Likely early to growth-stage start-ups!

That's at least what a lot of our early design partners and collaborators have been. Rivet slots in neatly to most modern TypeScript applications, and is pretty easy to adopt progressively.

(Also depends on your definition... I'd consider Ironclad a "growth-stage start-up," but I imagine others would say otherwise!)
I pay for premium still, but let me tell you this, between the self-hosted versions (that you can run with quant models) and the 'alternatives' that specialize on certain verticals (copilot for code or like claude as a generic alt.) - the competition is getting better day after day
https://www.cursor.so/

tldr: an IDE/editor, technically a modified version of VScode with AI integration built in
I'm glad they're putting it specifically under the "psychological science" box, too – systematically understanding things beyond "turn your notifications off! don't read the news!" is going to be very useful once the next startup figures out another way to "optimize engagement" with a different type of content.
Rust embraces abstractions because Rust abstractions are zero-cost. So you can liberally create them and use them without paying a runtime cost.

That makes abstractions far more useful and powerful, since you never need to do a cost-benefit analysis in your head, abstractions are just always a good idea in Rust.
In the section related to node.js compat, they state:

> Note — For a detailed breakdown of Node.js compatibility, check out: bun.sh/nodejs.

The detailed breakdown explicitly states which modules are not supported.
Bread and circus. That's all that matters. Want global warming solved? Have it interrupt Monday night football.
> Rust considered using those (and, at first, that was the project's direction). Ultimately, they went to the stackless operation model because stackfull coroutine requires a runtime that preempts coroutines (to do essentially what the kernel does with threads). This was deemed too expensive.

Stackful coroutines don't require a preemptive runtime. I certainly hope that we didn't end up with colored functions in Rust because of such a misconception.
How Long Do Rising Temperatures Affect Economic Growth?
>How might rising temperatures around the world affect the growth rate of GDP per person? Examining data across countries over the past half-century shows that a change in temperature affects GDP growth, but only temporarily. Combining estimates from past data with a simple growth model can help project the impacts of future higher temperatures on GDP per person by country. These projections suggest that total global losses in output per person could be substantial, though smaller than if a given change in temperature had a permanent effect on GDP growth.
If you look around at the other competition at the time, it's worth noting that many other languages that already existed for decades ultimately came up with the same basic solution. In fact one of the weird things about the Node propaganda at the time was precisely that every other major scripting language tended to have not just one event-based library, but choices of event based libraries. Perl even had a metapackage abstracting several of them. It was actually a bog-standard choice, not some sort of incredible innovation.

I don't think it's a "good" solution in the abstract, but in the concrete of "I have a dynamically-typed scripting language with already over a decade of development and many more years of development that will happen before the event-based stuff is really standard", it's nearly the only choice. Python's gevent was the only other thing I saw that kinda solved the problem, and I really liked it, but I'm not sure it's a sustainable model in the end as it involves writing a package that aggressively reaches into other packages to do its magic; it is a constant game of catch-up.

I do think it's a grave error in the 2020s to adopt async as the only model for a language, though. There are better choices. And I actually exclude Rust here, because async is not mandatory and not the only model; I think in some sense the community is making the error of not realizing that your task will never have more than maybe a hundred threads in it and a 2023 computer will chomp on that without you noticing. Don't scale for millions of concurrent tasks when you're only looking at a couple dozen max, no matter what language or environment you're in. Very common problem for programmers this decade. It may well be the most impactful premature optimization in programming I see today.
People who know what they are doing will understand the peril of using a moving-target interface in a production application. Depending on the project that may or may not be a problem.
As far as I understand the article, the author is talking about "massively concurrent userspace programs" which also have one more constraint: they can't rely on IPC to breakup or offload that concurrency.

(They mention this extra constraint early in the article: "But this approach has its limitations. Inter-process communication is not cheap, since most implementations copy data to OS memory and back.")

I'm familiar with writing services with large throughputs by offloading tasks onto a queue (say Redis/Rabbitmq whatever) and having a lot of single threaded "agents" or "workers" picking them off the queue and processing them.

But as implied in the earlier quote from the article, this is not an acceptable fast or cheap enough solution for the problems the author is talking about.

So now am left wondering: what are some examples of the class of (1%) problems the author is talking about in this article?
I continue to pay for it because it serves as my personal assistant and saves me time that adds up over time. Want to query something obscure quickly before digging deeper? ChatGPT has your back. Want to look up some coding convention that you've forgotten the details of? ChatGPT is ready with a quick example. Want to workshop an outline or expand on an existing outline? ChatGPT is there to help.

The trough of disillusionment is here, but that doesn't mean that there aren't plenty of useful applications to make life a little easier.
> Also, sidenote, I think JavaScript's only real failure is the lack of a canonical module/import system. That error lead to countless re-implementations of buildsystems and tens of thousands of hours wasted debugging.

Agreed. I don't hate on JS, in fact I think it's the best tool for the several very common use cases it targets, and I'll even defend the way objects work in it (i.e. lets me do what I want with minimal fuss). The import/require drama was annoying, though.
Pretty much anywhere. I know individual data points can be tricky to argue, but I was talking about an average person. BLS data supports the thesis on how going from 2 earners to 1 can significantly reduce the net household income, but the expenses don’t go down significantly.

https://www.bls.gov/opub/mlr/2020/article/comparing-characte...
Ukraine's Strikes Behind Enemy Lines Are Paying Off
Well, it's not only big tech that pays high salaries.
Reporters are not so good at investigating corruption where you just choose to allocate resources between priorities differently or neglect some issue. Then it’s a “both” sides thing. Certain kinds of corruption are easier at smaller scales, other kinds of corruption (potentially worse) happen at larger scales (think about the kind of money that goes into federal politics). I don’t think journalism would do a better job with a single Bay Area government vs reporters in each individual city as now.

It is all trade offs, but I think there are better structural solutions that don’t create a quasi government covering the a good chunk of the Bay.
Updates to Your GitHub Feed
Yet we should still continue to press against proprietary chat. Developers are the kind of folks wise enough about technology to know better than to support this. There are very good reasons to at a minimum support a bridge. If we have to teach new developers raised on Discord, then that’s a great opportunity for them.

> Choosing proprietary tools and services for your free software project ultimately sends a message to downstream developers and users of your project that freedom of all users—developers included—is not a priority.

— Matt Lee
For anyone interested I've been working a very similar idea of LLMs for blackbox optimization: https://github.com/sshh12/llm_optimize
It sounds very reasonable to me. I would say 90% of programs don’t need threads or concurrency at all.
> linear system in a finite field

I said it below, but I'll repeat it here: in my humble opinion, this is not what you want from a CAS. This is functionality better delegated to a BLAS (yes even with the finite field qualifier). And just because both CAS and BLAS have A in them, does not mean they are the same thing.
Mastering Bloom Filters: Big Data Processing in Python
US college football looks like one of the most path dependent things ever
I didn't expect anything from them. Way to perfectly encapsulate the entitled gaslighter/perpetual victim. Glad to know that, in your mind, it's perfectly valid for someone to contribute nothing and expect a free ride.

They just decided they wanted to be a traditional housespouse. I certainly would have liked them to contribute something to the household, like walking the dog that they went and got of their own accord half of the time or to contribute something in their stead of contributing to household expenses. Mostly since I was spending the majority of my hard earned money on them sitting on their ass watching TV or going to museums and cafes with friends. And the majority of my time supporting their lifestyle.

I didn't ask them to be in that role, they were perfectly welcome to get a job and we could share an equal amount in all household chores. And in fact, that was the ultimatum that ended our relationship, leading into a different one of equal shares of contribution and a shared happiness (both employed, equal split of household chores).
What self-hosted versions are you most interested in?
Unfortunately this sounds like a typical pro-Linux rant with the usual scare words such as "Microsoft", "UEFI", "secure boot", etc. To be clear, I am attacking the piece itself, not the author.

The reason there is no explicit threat model defined in the TPM specs is because it defines a general-purpose hardware security module. It is up to integrator to define the threat model (TPM's security properties also depend on the rest of the system) and the application.

Even if a TPM is not perfect and depends on other pieces of the puzzle to also be secure, it at least opens the possibility of making it secure in the future once those vulnerabilities are discovered & fixed. Furthermore, even in this vulnerable state, it still increases the effort required for a successful attack.

Support for TPM-backed full disk encryption means you can now have FDE on by default for everyone with no usability impact at all. Even if it's not secure and a dedicated attack will still break it, it means a casual attacker can't just pull a drive or reboot the machine and run chntpw or steal sensitive data from discarded drives that haven't been properly wiped.

I like TPMs. I like the fact that a rogue datacenter employee or intruder can't just pull one of my servers' drives out and get sensitive data. I like not having to worry about having sensitive keys on the filesystem somewhere because every secret is in memory and is ultimately derived from the TPM doing remote attestation at boot and handing ephemeral keys. I like not having to worry about unattended reboots or entering LUKS passphrases remotely.
He didn't say queues though. CSP isn't processes streaming data to each other through buffered channels, it's one process synchronously passing one message to another. Whichever one gets the the communication point waits for the other.
It is currently considered unethical to selectively breed humans (even for hilarious reasons like "to fart less"). It is not unethical to selectively breed non-human organisms.