skysight-inc/HackerNews huggingface dataset:
> Wouldn't it be nice if LetsEncrypt could issue you a (1) name constrained, [...] intermediate CA

Unfortunately, name constraints don't work in all clients. Name constraints are an 'extension' to the standard and supporting them is optional.

According to [1]

> Before relying on this solution to protect our users, we wanted to make sure browsers were really implementing Name Constraints verification and doing so correctly. The initial results were promising: each of the browsers we tested (Chrome, Firefox, Edge, and Safari) all gave verification exceptions when browsing to a site where a CA signed a certificate in violation of the constraints.

> However, as we extended our test suite beyond basic tests we rapidly began to lose confidence. [...] The result was that every browser (except for Firefox, which showed a 100% pass rate) and every HTTPS client (such as Java, Node.JS, and Python) allowed some sort of Name Constraint bypass.

And even if someone went around and fixed every TLS library in the world, there'd still be millions of devices out there that never get security updates, like smart fridges and ancient android tablets.

There's a major chicken-and-egg problem: Because nobody will issue name-constrained certificates, clients don't have much reason to prioritise it as a feature. And because name constraints don't work perfectly everywhere, nobody will issue name-constrained certificates.

I doubt we'll ever see a trusted CA issuing name constrained intermediate CA certificates.

Of course, they could offer an API where if you've passed auth for *.example.com you can issue a cert for any subdomain below that without any further validation...

[1] https://netflixtechblog.com/bettertls-c9915cd255c0
And how is he supposed to do that? Drew's wlroots is open source so hyperland can use it whether he likes it or not.
One of the parents claims that everything supports name constraints now, so my suggestion was with this assumption in mind.
What is RISC-V, and why we're unlocking its potential
Roblox Game Devs Duped by Malicious NPM Packages
Doesn't surprise me. NYT is known for the quick takes and quiet edits.
> when throttled to similar wattage (see the section about 35W)
> I think no one would _really_ object to labelling like oatmeal healthier than chips.

Chip manufacturers certainly would (and do). They pay money to politicians to keep these regulations away, and they pay money to media to stir up a counter-movement against these ideas.
Not surprising, It tries to push ideas that fall out of favor and look unhinged in hindsight.
Rust has sum types named wrongly as enums, which java also has as sealed interfaces. The option type is just one example for a sum type, which is as easy to express in Java as

sealed interface Option<T> permits Some<T>, None<T> {
record Some<T>(T value) {}
record None<T>() {}
}

Sure, you have written 3 words more than Rust, and?
From the article:

> Until 2016 Antarctica's winter sea-ice had actually been growing in size.

>"There is a chance that it's a really freak expression of natural variability," [Dr Mallet] says

There isn't an obvious trend. I'm pleased that they aren't trying to hide this and that the article is clear that we don't know everything about Antarctica (I'd imagine it's very hard to get data for annual sea ice maxima before we started measuring them). This isn't supposed to single-handedly convince anyone that climate change is happening, but show a piece of evidence that extreme weather events are becoming more frequent.
Those are pedantic semantics. I assume you know what I mean. But I'll explain it to you: with Rust you are in control of how memory is managed. Indeed through the borrow checker.
Why can't the grid operator just put "we reserve the right to shut off your power if demand exceeds our capacity" in their TOS?
How does this interpretation make any difference? It’s the same like people pointing out “short term greed” as the reason for these moves, but did this move increase short term greed either? Which logical person could have thought this was a good idea? No one that’s who. No matter what the strategy is.
I think what he means to say is that without the influence of advertising that may falsely promote its health benefits, breakfast cereal can seem less meaningful.
In django you're importing a default cache, a default storage etc, and write your code to the interface. In settings.py you wire it all up. It's basically the same, for testing you would have to mock the import or provide some implementation.
Dogs survived CRT monitors and TVs, so I'd assume their behaviour would be known in that instance.

I'm unlucky enough to hear 15 kHz, and you'd easily hear any TVs turned on two storeys away. CRT ultrasounds used to be unbearably, migraine-inducing loud.

I assume laptop speakers wouldn't be anywhere as bad.
> I do not understand "breakfast" at all. When I wake up usually the last thing I want to do is start eating

Your case is a minority. I'm guilty myself of this kind of thinking, so instead of saying "I don't understand people doing x" I try to ask myself "why do people do x?" or "why am I different than other people?".
I can’t help but wonder if it is really about them not wanting ways around their paywall and are just using this as a convenient cover
Could we burn iron for energy instead of fossil fuels?
I assume drug dealers like recurring revenue as much as a SaaS company does and it's hard to get recurring revenue from a dead person.
Yes, it's goddamn immutable collections and Optionals.

People still hate it because it's immutable, therefore you can't do hashmap.add(), and it's hard because they can't randomly return nulls, and it's slow because the hashmap now takes o(log n) always instead of o(1) sometimes and o(n) other times.

People hate it because it's different to the Java they learnt 20 years ago, that they claim is exactly the same as today.
If I am a faceless pension fund that is going to earn short term on this much better, and be free to walk away and do the same thing to another company?

Sure.

This is exactly the same playbook as with private equity - the point is to make the shareholders richer as fast as possible, and long-term strategies do not pay out as fast while possibly introducing longer term risks.
As a parent, I think it makes perfect sense. Most kids like grains (the lunch and dinner version of cereal is pasta) and it's very easy to get cereal onto the table while you're doing ten other things to get the kids out the door. Even oatmeal is not quite as easy.

Whether it's worth the nutritional trade off, I dunno. But we also make eggs a lot, which requires more time and attention, and usually I end up eating them cold myself when I get back after dropping everyone off.
Ask HN: How did services like Foodora get all their data?
How did Foodora manage to scrape all the restaurants in a city and get all their menus?

How were the able to scale this into multiple countries?
The relatively short US life expectancy at birth is mostly due to drug related and violent early deaths. Those middle aged US-Americans that are browsing the web for longevity drugs can expect to live as long as similar demographics in Europe and elsewhere, even without the drugs.
Serious question, what engine should an aspiring indie dev currently pick, especially when targeting 2D?

- Godot seems immature in many ways (for example, Web export is currently broken on macOS/iOS according to their docs)

- Unreal seems like major overkill and apparently not well suited for 2D

Is there anything else that is a serious contender?

How can you protect yourself to not end up in a similar situation as the author?
> The maintainers decide whether something gets merged or not, and I've never seen a project that says "We'll merge anything that passes our test suite". Maybe I missed something here...

Maintainers may not want to determine who gets to feed their family, by choosing which contribution gets merged (either by deciding between competing implementations, or deciding which contribution to review). That's even more extreme than typical management tasks like bonus allocation.

Maintainers might also be worried that it turns open-source development in to a gig economy, with all the resulting problems. The Zig developers seem to alude to this, too.

I'm not sure if open source in general has a funding problem. The corporate takeover started in the mid-90s, and is fairly complete by now. If you look closely at some of the often-quoted examples for serious underfunding, it's more about disputes about prioritization, such as long term, bug-for-bug compatibility support vs ongoing development.
It’s really not clear to me what the transformation is, but from the naming and result it mostly looks like it’s an abuse of reduce and should be a map, possibly feeding into an Object / Map constructor / factory?
> If wealth was redistributed, so would pollution.

If wealth was redistributed, some people would be able to start affording rent and groceries (instead of have to choose one or the other): they would not necessarily be able to start flying on private jets. If wealth was redistributed, some folks may be able to afford to buy a newer more fuel efficient car (or hybrid/EV) instead of limping along in their 2004 Chevy.
Funny thing is frozen French fries get nutriscore A because as long it's not prepared, it are just potatoes.
Yum. Interesting, wonder where you are that there is no muesli? I'm in CA and can get muesli at my local Trader Joe's and Whole Foods.
> First of all, such things are of the top 0.1%, not the 10%.

Exactly, the 0.1% are part of the 10%
"So lets assume the drug cost 180 million to develop."

The trouble is, you not only have to cover expenses for development of this, very successful drug, but also for 50 others that you never heard of, because they were duds, but the necessary trials still cost money.

Pharma is a numbers game. Most attempts fail, and you need to cover the cost of all the failures, otherwise you can't try out anything new.

It is possible that AI will help here, modelling drugs in virtual environments and recommending the most hopeful molecules. If it can be done, the ratio of failures to successes could improve.
> Which logical person could have thought this was a good idea?

I think maybe what the above person is trying to say is that while no one in the game dev space would've thought this is a good idea, everyone in the online ad speace thinks this is a good idea. You could've predicted this would happen just from knowing that the game engine was acquired by an adtech company.

It's a very insightful post, don't dismiss it.
At the bottom of the page, there's related articles about paper drinking straws and paper bags:

https://www.sciencedaily.com/releases/2023/08/230825122044.h...

https://www.sciencedaily.com/releases/2020/10/201014114629.h...
Institutional shareholders with large portfolios care about stock performance for their market plays, not about the company.

And they happen to have large influence on choice of CEO and who said CEO is going to try to please.
I used greedy sampling (temperature 0) for all of them. Since I didn't have access to logits/probabilities for Apple's model, I wasn't able to do anything else in a way that would be fair.
As someone from the us, I’m deeply skeptical of government nutritional labeling / recommendation since the travesty of the food pyramid when I was young.
Cereals were basically the best thing to eat because how else where you going to fill the foundation of the pyramid with your 11 (exact number is fuzzy) recommended servings of grains per day. The pyramid was shown proudly on all the boxes.
Meanwhile protein and fats were to be minimized.
It may not be causal, but it certainly didn’t help the obesity problem in this country that the government explicitly recommended everyone fill up in foods that aren’t actually filling.
While you have to extend some things in Spring, yes, the whole point of the DI in spring is so that you can often compose instead of extend.
Maybe: "Today was fine. Since I've retired, I'm taking my life a day a day".

Or maybe I wanted to express myself in the timeless words of the poets:

"A day, a day of glory! A day that ends our woe! A day that tells of triumph. Against our vanquished foe!"

"Rose is a rose is a rose is a rose. Loveliness extreme.
Extra gaiters. Loveliness extreme."

"A-well now, everybody's heard about the bird, everybody's heard about the bird, About the bird, the bird, bird bird bird, Haven't you heard about the bird? Don't you know that the bird's the word?"
Wow, that is a point in case on how disconnected things have became from real problems of population. The ruling class and their second-hand dealer pseudo-intellectuals are revealing their pathological confusion. A quote to this is in place by Th. Sowell:

It is usually futile to try to talk facts and analysis to people who are enjoying a sense of moral superiority in their ignorance.
I really like the message, “don’t be afraid to be wrong”. I like to tell people I’ve worked with I have a “First Idiot Principle”. Which is, “Don’t ever be afraid to be the first idiot in the room.”

There are many situations in life where someone puts out a call for ideas. Maybe a person asks for opinions in a meeting for example. Applying the First Idiot Principle you should respond to these even if you have an idiot idea. Usually one of a three things happens:

1. No one has a better idea and it isn’t an idiot idea after all.

2. Folks silently agree with you but were afraid to share because they thought they might look like the idiot. Now that the idea is public they back you up.

3. It is an idiot idea! And someone else realizes they have a better idea and they feel compelled to share when previously they may have thought they were the one with the idiot idea.

No matter what happens, you get an outcome that’s better than not sharing the idea at all.
IME there was a fad (that thankfully never picked up) where people were talking about making giant unreable piles of curry functions and calling it finally, some good functional js.

They looked like write-only code to me and at high-risk of assaulting the GC (aka slower than lodash).
Polluter pays would be a pretty significant improvement.
But is it? If this ends up killing the unity engine business, then what's the gain to ad business?
Did Steve Jobs have psychopathic traits? I don’t know. This answer on Quora has more to say about him being a perfectionist: https://www.quora.com/Was-Steve-Jobs-a-psychopath?share=1

I don’t disagree with you that having psychopathic traits makes you better at some things. How much of the video did you watch? The problem is more to do with systems that attract people with psychopathic traits.
Sometimes (from what I've read, I'm also non-US) many people who end up on fentanyl were not even going through any mental or existential issues, at least not overtly, but rather were prescribed opiates such as oxycodone after being legitimately diagnosed with more-or-less severe and prolonged pain. When I say they were "legitimately" diagnosed, I mean that the patient didn't fake their ailment nor went to the doctor with the intent of getting opiates—at least not initially. Whether opiates were a reasonable approach to deal with the patient's pain is a whole'nother issue.

Over time, as the prescribed opiate painkiller loses effectiveness (as well as its pleasurable side-effects), patients may request a longer or a stronger prescription. Their doctor may or may not oblige. The patient may switch doctors to another who is more accommodating. Then the new prescription loses potency, and the cycle repeats. At some point the patient is not even taking the opiate primarily for their pain, whether they are aware of it or not, but rather for how it makes them feel. Eventually the patient cannot get a stronger prescription, or even prolong the one they had already, for whatever reason—be it financial, insurance, or doctor's refusal. That's when getting a tiny dose of fentanyl will "help". And now they're on fentanyl.

Obviously this does not happen in a vacuum. There are many societal, cultural and healthcare issues that make this scenario much more likely in the USA than in other developed countries: a combination of the healthcare system, workplace expectations, and the culture of pulling oneself up from ones own bootstraps.
Slow to digest is good! Unless you need to get instantly into hard physical work in the morning it's better to have slow trickle of energy, at least for me, keeps me sated for longer.

As for cereals, I eat them with cocoa instead of milk, just add a spoon... far tastier.
Reminds me of https://github.com/microsoft/checkedc
This article lays out his problem very successfully, but doesn't talk at all about what he plans to do about it, which I'd be very interested to hear.
Most of my mornings involve runs, anywhere from 8-20 mi. I need breakfast, generally oats, fruit and peanut butter.
sizeof isn't an obscure part of the language, yes, but the specific behavior here might still be unexpected for a decent number of people, who might, say, think they can always use "sizeof(int)" and "4" interchangeably to shorten code (which could very well be true for all platforms they will ever care about, but nevertheless is not a guaranteed property by C by itself).
What a weird article, I kept scrolling down looking for the ... breakfast cereal? The only thing they have on there that is what people are actually talking about is frosted flakes. They don't even have plain Cheerios on this list... Am I missing something?
But it's still a ton of carbohydrates and not much else, even if you reduce sugar
> competition at the expense of cooperation

We've seen contributors author PRs together and split bounties. Also contributors in the Zig thread were actually trying to collaborate on a solution (comments were deleted)

> Instead of scouting for a suitable candidate

Open calls have faster turnaround & lower overhead

> clear contract ... payout

Sometimes design & implementation is not decided and spec'ed in advance and multiple perspectives & sometimes PoCs are required, at which point the maintainers can choose a plan of action and assign a developer without much duplicate work. That's classic OSS dev with or without bounties.

https://news.ycombinator.com/item?id=37543536 there's more replies here that I agree with

--

I also suggest you checkout the discussions deleted by Zig for a full perspective https://pastebin.com/nDA0LD3N

As a matter of fact the initial convo on the thread proved contrary to the every point made regarding competition and "battle royal dynamics" as people attempting the bounty were actually collaborating. We've seen quite a few cases where people authored PRs together and split the rewards on Algora.

In addition there was no "pressure on the development team to accept the winning submission" it was explicitly stated that the work did not need to be merged upstream, and that the sponsorship would be awarded as soon as the technical requirements were met.

--

Ultimately, bounties are a tool. It's in maintainers' discretion whether or not to use it.

The optimal design for a bounties platform is still a work in progress. We're two bootstrapped founders (one developer) figuring things out along the way, trying to give folks a good experience and trying to learn.
I am not a game developer but John Romero has said good things about Solar2D (formerly known as Corna, oof)
I would wonder if I really want to write a blog (where people arrives, typically by chance, and never goes back) or build an online app (where people go back because it is useful for them).
I made the initial comment and I was not mocking anyone, I just think it's different how so many people think of fish as separate from "animal meat".

Even just "meat" by itself wouldn't have been interesting to me as that often is short for "red meat", but "animal meat" is.
The plausibly healthful cold cereals in supermarkets I shop now are down to shredded wheat, the original Cheerios, and FiberOne (expensive). The protein thing is a sideshow; the requirement for protein is only 70 grams/day, so most Americans are way over-proteined, and the milk (non-fat, of course) on your cereal is going to give a decent amount. Put fresh berries on the cereal as often as possible, other fresh fruit in moderation otherwise.
This was a fun read.
I can't believe that 55 years after Go To Statement Considered Harmful we are still operating at medieval level of "I recently found this piece of code and now I have opinions to share".

If coding for an employer, it's their business. But for use in collaborative public projects, I want a linter with experimentally measured effect on readability. Not stories from the field.
I wrote oats, not oatmeal (I don't think we really use that term in the UK). AIUI "Oatmeal" can refer to various things, including high GI porridge.

I only buy steel-cut oats, which various sources on google say are around 42 GI [0][1]. I do concede that any form of oats are on the upper-end of low and/or medium, and aren't some magic super food and one should not focus just on GI.

Steel cut oats are definitely better than most breakfast cereals however.

Joel Fuhrman in his book on reversing diabates also recommends small portions of oats (but mostly says to eat veggies).

[0] https://www.canr.msu.edu/news/steel_cut_oats_are_a_nutrient_...

[1] https://www.nutritionletter.tufts.edu/ask-experts/q-before-c...
You're trying to make the point that the only companies using Java are doing so because of legacy. That is demonstrably untrue. Netflix and Google have had ample time and capacity to replace Java, yet they didn't.

As any good engineer, people working at those companies recognize that Java, Golang, Rust etc. are all tools and these tools have their place in different scenarios.

I used to be like you, but my personal "anti-language" was PHP. I would talk down on organizations using PHP and I would take them less seriously as engineers. But I have come to see that they too are using a language (PHP in this case) as a tool to build a business. And it serves those orgs well apparently.

Don't get me wrong, Java would not be my first choice in many cases. At the company I'm working for, we only use Golang and Python in the backend and Typescript in the frontend. That doesn't mean that I cannot recognize the value the Java can bring and the niche it occupies.

I'm actually pretty amazed by how far Java has come as a language. 10 years ago, I thought Java was going to be replaced by the likes of Kotlin or even Scala. But Java has pretty much caught up in terms of features and ergonomics compared to the Kotlin and occupies a comfortable spot now as being an expressive and productive language without bringing the learning curve and footguns of Scala.
Yes, you're right, I should have mentioned it in the post, but I used pure greedy sampling for the GPT-2 outputs since I couldn't do anything but that for the Apple model. So temperature was set to zero, and there was no repetition penalty.
Microsoft Project Verona, a research programming language
Hunger also gets me out of bed, but then I crave proteins not carbs. Lots of varieties in us humans.
The Steam Deck and Framework laptop get me pretty excited!
Yeah well put! The concept of having grains with dairy is perfectly sound. But everybody knows "froot loops" is just candy.
I think that's true. I also think that many people don't know the difference. I also think people have bought the expensive stuff and it end's up being just as cheap, but had fancy marketing. I also think executives chasing a bonus will take a quality brand and cheapen it for higher profits.

An example, I bought a DeWalt electric pole trimmer. It was expensive, but I bought it because I wanted something that lasted. It broke after a couple of weeks and sits collecting dust. DeWalt used to be known for top quality stuff that contractors use. The brand is now diluted and probably crap.

It really makes me hesitant to buy much anything I don't absolutely need.