skysight-inc/HackerNews huggingface dataset:
I ended up working on graphics projects in order to get a job in the industry, and felt the need to specialize. Still tinkering with my game, it is a base builder with simple spawn mechanics so far.

I learnt how to do simple 2d physics from scratch, collision subsystems, a UI subsystem, setting up tilemaps, implementing nav meshes and fluid sim, shadows and lights, and support for tons of sprites, experimenting with impostors for more realistic assets, and am now in the process of spinning up prototypes from the base code that I have so far.

I don't think I will have a finished game any time soon(the next year or so), since I'm still iterating on the core game mechanics.
I'm having trouble understanding why ESM was needed in the first place. I've always found the require system to be very elegant. What benefits does the module syntax provide?

I forked and customized an old Javascript templating engine and have published it as npm packages. Should I spend effort migrating to the new way?
By three sigma customer, I meant that I've taken thousands of Uber rides in three years, and tipped very well. They have completely ignored what a positive outlier the account was when deciding to abandon it.

In triage, my customer segment is one you'd want to save. At least thinking rationally as a business owner.
If people bought their phone because of iCloud there's no need to advertise it to them.

What's really annoying on iOS is that persistent notification badge to "finish setting up your account" even when I choose not to use some apple services.
Even just knowing what i've entered i can understand hiding this.... especially if you're attaching your own name to things.

Plus, it opens liability issues.
Thank you for this. There seems to be layers of delusions throughout this comment section where it seems many people simply cannot imagine a functioning world sans some bit of questionable tech and its derivative marketing strategies that are barely 20-years old.

Context-based advertising, AKA “advertising”, has been around forever, and respected privacy to the extent that Gatorade only needed to know that people at gyms might be thirsty. Still sold a ton of slightly salty sugar water, and didn’t even suggest that they should be allowed to rummage through every customer’s gym bag, follow them home, take notes on their dinner choices and television habits, watch them sleep while taking their pulse, and then slip random notes to them throughout the day reminding them that their electrolytes were dangerously slightly on the lower side of average (code RED).
Promptflow: Build high-quality LLM app from prototyping to production deployment
Open up developer tools, choose "toggle device toolbar" in the top left (or equivalent in other browsers), pick a tablet device, and set orientation to landscape. This lets you simulate touch events with your mouse.
My config file paths have either been constant (".dotfile") or required run-time information that could not be constexpr'ed. I don't see how constexpr would be useful.

Then again, I am primarily a Python and C programmer, so there is likely some underlying reasoning I'm missing.
Be sure to check out the comments on the page - lots of optimisations for the julia code.
> Not really, because the difference is rather significant here.

No, it really isn't. It's 100% semantics. The context makes the meaning clear.

But how about you explain what you think the rather significant difference is to progress the discussion? So it isn't just is too/is not which it seems to be becoming.

> There's that little mental game I was referring to.

Sure, an accusation without basis.

> There you go again. Maybe substitute in "ideological construct" for god and you'll finally get it.

No, I get it, and my reply made that clear. It seemed to have passed you by, possibly because you seem hyper-focused on semantics.

As an aside, are you religious yourself? I typically only see these lines of argument from people that are and feel defensive.
no they just hire someone else to work in their place. Restaurant owners I've worked for don't care if customers tip, that's the servers problem. And cooks don't care either if they are the reason the server doesn't get a tip. They get full wages regardless.
Ptrace is one of a number of ways to hook syscalls without LD_PRELOAD.

The gVisor docs list 3 ways: KVM, systrap, ptrace
https://gvisor.dev/docs/architecture_guide/platforms/ :

> systrap: The systrap platform relies seccomp’s SECCOMP_RET_TRAP feature in order to intercept system calls. This makes the kernel send SIGSYS to the triggering thread, which hands over control to gVisor to handle the system call. For more details, please see the systrap README file.

> systrap replaced ptrace as the default gVisor platform in mid-2023. If you depend on ptrace, and systrap doesn’t fulfill your needs, please voice your feedback.

> ptrace: The ptrace platform uses PTRACE_SYSEMU to execute user code without allowing it to execute host system calls. This platform can run anywhere that ptrace works (even VMs without nested virtualization), which is ubiquitous.

> Unfortunately, the ptrace platform has high context switch overhead, so system call-heavy applications may pay a performance penalty. For this reason, systrap is almost always the better choice.

The Falco docs list 3 syscall event drivers: Kernel module, Classic eBPF probe, and Modern eBPF probe:
https://falco.org/docs/event-sources/kernel/

Dynamic linker > Systems using ELF:
https://en.wikipedia.org/wiki/Dynamic_linker#Systems_using_E...
Huh? Here's the NYT article's title:

"F.A.A. Spells Out Needed Fixes for SpaceX’s Starship Rocket"

Did the FAA spell out needed fixes or agree with SpaceX's assessment? Let's review the letter...

"The FAA has been provided with sufficient information and accepts the root causes and corrective actions described in the mishap report."

And __I__ have an out there reading?! Plain English: The NYT, in their headline (the first thing people see) says the FAA spells out needed fixes. However the FAA in their letter to SpaceX says that the FAA accepts the corrective actions presented in the mishap report authored by SpaceX. And that was the most objective of the headlines I quoted. And as for Bloomberg?

"SpaceX Ordered by FAA to Make Fixes After Starship Blowup : -- FAA blames ‘multiple root causes’ for flawed Starship launch -- SpaceX must apply for, receive FAA license modification"

I'm sorry, it's simply disingenuous to call that the more representative statement of what actually happened in light of the letter that the FAA authored. The statement, "FAA blames ‘multiple root causes’ for flawed Starship launch" comes close to crossing the line of simply not being truthful.... in terms of implication it's a long way off from the FAA accepting the root causes and corrective actions in SpaceX's report.

As far as the "I've seen just as many people make the argument..." statement. At best its a non-statement which on its face cannot help us understand anything factual here; truth isn't a popularity contest. There are many wrong people in this world and I can say with great confidence that in this discussion there is at least one wrong person. (I will let anyone eavesdropping make that judgment for themselves, as we're clearly not trying to convince each other of the correctness of our respective positions. :-) )
Parent commenter is talking about having a sub CA that is restricted to issuing certs for a specific domain.

For example let’s say that I am hosting a website at somewhere.example.com

Today I would be able to get a Let’s Encrypt TLS cert for somewhere.example.com and if I control the DNS for somewhere.example.com I can get a wild card cert for *.somewhere.example.com

But from what parent is saying, with name constraints it would be possible for Let’s Encrypt to give me a cert that would allow me to act as CA for anything under my somewhere.example.com

Meaning that I could for example issue a TLS cert for treehouse.internal.somewhere.example.com using the restricted CA certificate that was given to me.

I think.
tldr: in the test's first implementation mojo was faster but then the refactored and made the julia code faster by 8x over mojo.

that's cool but mojo literally just came out
Man buys metal detector for fun and makes the gold find of the century in Norway
Absolutely not. You're missing a very real situation, and that situation is "That guy's a Nazi."

You hear it over and over. This person is a fascist, that person is a Nazi. Go head, hit Google, search for (and use quotes) something like "Donald Trump is a Nazi." You'll find thousands of results returned. So, can we just go be violent at someone because someone else says "They're a Nazi"? That's what I'm talking about. You have a person, you haven't seen them do anything, they haven't done anything to you, but Rick says "He's a Nazi," so do we go punch them on Rick's word?

I keep hammering on this because we have people feeling fully justified in physically attacking others who haven't physically attacked anyone else (non-violent), but someone has ascribed Nazi to them. This isn't just a hypothetical, take that bike lock basher guy. He struck seven people on the head with a bike lock. (Interestingly, at least one of them was friendly fire.)

Now, you won't get anyone to call that left-wing terrorism, for some odd reason, and the guy completely skated. So we have these non-violent people just standing there, someone thinks "that person is a Nazi," and attacks them. That's my non-violent Nazi. Are they actually fondling an Iron Cross at home? Doing a little seig heil before bed? We don't know, and we generally will never know.

And I focus on that because, let's be honest, there's almost no actual Nazis. Probably some elderly "were Hitler Youth" hanging out in Brazil, but aside from that, it's just really sloppy slang, and I've had to hang with some people who will gleefully refer to anyone to the right of Bernie Sanders as a fascist Nazi.
It's kind of funny. It varies. There are two McDonalds within 3 miles of my home. One is in a lower middle class area and it's an absolute dump. Dirty, food is poorly prepared, employees are stressed and kind of disheveled.

The other one is in an upper middle class suburb. Very clean with friendly employees and the food is perfect.... well, "perfect" by McDonalds standards.

I try not to eat at McDonalds more than maybe 5-6 times a year. So I'm not an expert. But I have noticed that McDonalds in "nice" areas tend to be "nice."
But that's exactly my point. I don't care about the number of life years. I care about the ones I have being fun and interesting.

Shying away behind a mask and avoiding to busy night clubs etc defeats that purpose. That I will die a few years early when I'm old doesn't really bother me because that time will be less valuable anyway.

One way or another I will catch diseases and I could die at any time. Might as well make the journey interesting and without too much worries.

If I cared so much I wouldn't be obese either :)

But like I said this is a tradeoff for each of us to make, I'm surprised though that the US is still like this, here the masks are really over and done with and everyone is trying to forget those horrible years as much as possible.
Yes, but the argument is more specific: if Cisco had reinvested some profits into 5G, arguably the company would have been even more profitable long-term.
This is a very interesting take, thank you. Is there "denied party screening" for things such as Uber passenger rides or food delivery? I have the same exact experience (almost identical) with Grubhub+ when ordering food, though just with these vendors (Uber, Grubhub) and no others.

What vendor does this, is it possible to correct one's profile? Also, is there any general redress mechanism?

The whole thing is strange since Uber and Grubhub dont have any real identification on you except phone/email/creditcard name -- is that even enough to do denied party screening and blacklist someone?

Also, anyone know the rationale to conduct denied party screening on food orders?
Yeah, seems like there isn't a single place where mid-term/long-term contracts are listed.

Let me know in case you are looking for contractable devs.
Thank you, this seems to prevent client getting shell on the server, while allowing it to make SSHFS mounts. I've put /usr/sbin/nologin into client's row in /etc/passwd on the server as well (/dev/null would break everything including SSHFS).

Is there some way to specify that nothing except internal-sftp is allowed, as opposed to setting each option explicitly to "no"? The latter way seems error-prone, one is bound to miss some obscure option there.

And I wonder why do you suggest using the LOCAL6 log facility? In sftp-server, the default is AUTH...
How does this differ from other upscalers?
From my view: Uncertain. It's currently more of a "we would like to explore X" rather than a "we will depend on X". It's actually simpler to just pay for and build the more industrial scale battery installations, even considering the difficulties of financing, real estate, construction, regulations, etc. But I just work for one big company, maybe someone else is taking it much more seriously.

Personally I'm still not sure how the hell all the apartments and cities in the world are going to both install enough chargers and solve subscription charging when almost all the charger companies have absolute dogshit hardware on 3+ year old obsolete charging standards. Their software is so bad I can't believe someone was paid to write it. So, yeah, V2G? Let's get reliable managed chargers everywhere first and then think about the grid
Solid argument for outlawing fossil fuels.
How-to-Be-a-Great-Programmer
While this is correct, it's still much easier to think about lifetimes in managed languages. The huge majority of allocated objects gets garbage-collected after a very short time, when they leave the context (similar to RAII).

Mostly you need to think about large and/or important objects, and avoid cycles, and avoid unneeded references to such objects that would live for too long. Such cases are few.

The silver lining is that if you make a mistake and a large object would have to live slightly longer, you won't have to wrangle with the lifetime checker for that small sliver of lifetime. But if you make a big mistake, nothing will warn you about a memory leak, before the prod monitoring does.
I think it’s because the project has pitched itself as one that appeals to strong ideals. Technical ideals like safety and cultural ideals like inclusion and community driven.

Because it strives to those ideals, many of the people who flock to it hold them dearly as well. So when those tenets are broken, no matter how small or big, it sows distrust.

Other languages don’t wear those ideals on their sleeves. The closest ones are zig (which categorically says that some technical aspects are non-goals) or Swift (which has the same ideals but is more restricted in scope and appears corporate led).

The problem with community led is that you have your community issues aired in public.

I’d therefore argue rust isn’t any more or less dramatic than other language projects. It’s just more public and vocal when those happen, and when it happens it goes against ideals it states which makes it worse
Google fonts is just another way for Google to track users.
Note Mark: open-source, fast, minimal web-based Markdown notes app
Ooohh the software[0] runs on Ubuntu and optionally uses a GPS receiver... I happen to have a computer with such a receiver - a Panasonic ToughBook CF-31, which happens to have been formerly used by local LE (they all have them mounted in their cars). Would be pretty hilarious to use one of their old laptops to "snoop unto them as they snoop unto us", right? hahah ;)

[0] https://github.com/datapartyjs/rfparty-monitor
Used to use it all the time for debugging back in the day when I could write Linux apps in C professionally and not just build dumb webpages.
Preparing information for video division are costly to explain. This obstructs augmentations of start to finish calculations to new video division assignments, particularly in enormous jargon settings. To 'follow anything' without preparing on video information for each individual undertaking, we foster a decoupled video division approach (DEVA), made out of errand explicit picture level division and class/task-freethinker bi-directional worldly spread. Because of this plan, we just need a picture level model for the objective errand (which is less expensive to prepare) and a widespread transient engendering model which is prepared once and sums up across undertakings. To really consolidate these two modules, we utilize bi-directional proliferation for (semi-)online combination of division theories from various edges to produce a cognizant division.
https://www.smartmobsolution.com/
Wildly different cases, though. SpaceX occupies a unique and valuable space as a contractor, tesla is a consumer manufacturer being outcompeted at their own game.
Indeed, but there are ways around that. Check out fontsource (e.g. `npm install @fontsource-variable/roboto-flex`) to add fonts as a locally hosted dependency.
tipping less just means the employee legally gets paid less than minimum wage and the restaurant owners really don't care as long as they don't have to pay full wages. the only way to solve tipping is to change the minimum wage laws that allow lower wages for tipping industries.
There are cases where developers need to protect software from a local user with root access, like DRM related software, games that want to defend against pirates, etc.
This.

In fact, most embedded Linux thingy will be running the busybox version of core utilities instead of gnu coreutils for binary size reasons.

I other words, even gnu coreutils is too big.
I'm not sure that's the norm though. FAANG is typically outlier for X Y Z... I would guess that something like 90% of companies don't do severance. Hell, 16 weeks plus 2 weeks per year of tenure is GENEROUS. I'm honestly not sure why they are doing that, unless it isn't voluntary (e.g. some law in CA).

The idea that companies would never give anyone 2 weeks notice is probably closer to reality than the inverse of that assertion.
Yup, definitely write code that goes on servers.

I agree with you about containers.

The article was about writing small cli programs, and compiling them yourself. I guess I assumed you would be able to rebuild in this discussion trivially - you wrote the program.
I'm surprised they managed to keep half their staff.
If you're in the US, this means you go to no bars, nor any restaurants, and you do not order any food delivered to your home. Nor do you ever take a taxi. Nor get a massage. Nor order room service at a hotel.

I'm pretty skeptical.
One of the key considerations is how quickly you can move customers in and out.

Ever work at a busy diner? One of the little tricks of the trade is to make sure the coffee's not too hot. You want the customers to suck it down immediately, not sit around an extra 3 minutes waiting for it to cool.

It's probably more efficient and streamlined to give customers a drink rather than having them mill about at the fountain, and it's definitely more efficient to clear out loiterers who are hanging around and sipping free do-it-yourself refills.
This is best titled as an AskHN, but the topic of politics is probably for another forum.
> because the type is char* (i.e. pointer to a char) and the name of the variable is a.

But it's not.

char *a, b;

The type you are assigning is just char. The * only affects a.
It seems weird to call a protocol where the receivers aren't anonymous anonymous messaging, particularly because if either side is anonymous traffic analysis may give up the other pretty easily.

The reencryptions seem to identify forwarding parties that have the recipient as a contact.

It's also not clear to me if/how they avoid reencryptions blowing up the total traffic being carried (because the mesh can't de-duplicate the reencrypted messages afaict?).

The security model where Bob will be compromised but still manage to output an updated key while a message is still in flight isn't clear. If bob is compromised, the attacker probably has his device and he won't send out an updated key for a long time if ever.

It's not clear to me why MA adds so many bytes. An 8 byte tag should be more than enough to uniquely identify the session (and if a trivial number of trial decryptions were tolerated, perhaps 4 bytes would be fine). Also I find it odd to see 44 bytes described as small-- it's probably larger than the average plaintext payload.
Fortunately, that’s impossible, and likely to remain so: he’s definitely not a natural-born US citizen, and changing that would require 2/3 of both houses of Congress and 38 state legislatures to agree.
That doesn't sound right at all. You would want to lay off the bottom performers, it isn't a lottery. Imagine if a company said 'we need to get rid of 20% of our labor cost' and just ran a random number generator and got rid of the people who's number came up.
They're a ycombinator company. All of the job postings are.
Somehow, I just happened to find an underground beehive today. I was standing near it when bees were flying in and out, so I just got lucky enough for it to be almost impossible not to notice.

In the past, I enraged a hive that I think was also underground. I never saw it, but I suffered around 40 stings. The injuries sustained while running (and tripping, twice) were worse, though.

Those bees took a hat and a bucket of purple paint from me, that I never attempted to recover.
Seems similar to Rivet, which was posted recently:

https://news.ycombinator.com/item?id=37433218
There's one's own experience, and then there's empirical data. Your comment isn't adding any value to this discussion because it's just one in a sea of hundreds of millions.

Hell what about that mortgage company where people found out they were laid off because they couldn't log in to their fucking laptops?
explain? are you talking about "if you use them on the web, they track"? If I install the packages on my linux distro, that doesn't get tracked does it? they're just fonts? or do they keep pulling things down?
> So just like any other kind of scheduling?

Yes. Industries that care about latency take some pains to avoid this as well, of course.

> io_uring and epoll have nothing to do with it and can't avoid the problem: the problem is with code that can make progress and doesn't need to poll for anything.

They totally can though? If I write the exact same code that is called out as problematic in the post, my non-preemptive runtime will run a variety of tasks while non-preemptive tokio is claimed to run only one. This is because my `accept` method would either submit an "accept sqe" to io_uring and swap to the runtime or do nothing and swap to the runtime (in the case of a multishot accept). Then the runtime would continue processing all cqes in order received, not *only* the `accept` cqes. The tokio `accept` method and event loop could also avoid starving other tasks if the `accept` method was guaranteed to poll at least some portion of the time and all ready handlers from one poll were guaranteed to be called before polling again.

This sort of design solves the problem for any case of "My task that is performing I/O through my runtime is starving my other tasks." The remaining tasks that can starve other tasks are those that perform I/O by bypassing the runtime and those that spend a long time performing computations with no I/O. The former thing sounds like self-sabotage by the user, but unfortunately the latter thing probably requires the user to spend some effort on designing their program.

> The problem isn't unique to Rust either, and it's going to exist in any cooperative multitasking system: if you rely on tasks to yield by themselves, some won't.

If we leave the obvious defects in our software, we will continue running software with obvious defects in it, yes.
If the police are acting as a citizen to gather information, they should have a warrant. It cannot and should not be arbitrary.