skysight-inc/HackerNews huggingface dataset:
Very shallow argument

> And I think the fact that now everybody is writing React… and they’re writing it with JSX… and JSX is basically just inline XML… I think that shows that there are cases where actually XML is pretty good

No, popularity does not imply quality
Isn’t this technically more like the VMS or CP/M way?
This is so much bullshit. Just because your government refuses to build passenger railways and push car centric infra doesnt mean "Railways cover only so much area". Very difficuly to reach regions like islands/mountaineous terrains ? Then maybe.
Woman rescued from outhouse toilet after climbing in to retrieve Apple Watch
I'm totally with you on this one; but remember, if you have 25 developers in groups of 5, in only takes 1 muppet in any of the 5 groups to have low standards, and voila.

I've seen it, in pretty much every large business I've worked in.

This goes back to the saying: "you should never hire someone less good than yourself".

Sadly when the people hiring literally come from sales or airline customer service, your company is boned. It's only a matter of time.
Defeat DMA based cheating using IOMMU
Shows a sample implementation for VT-d(Intel) and AMD-vi, and how such implementation, either raw or using Windows APIs, can be used to restrict DMA access to specific physical pages.
I think it's worth also mentioning SR-IOV.

Basically, a single hardware device like a network card pretends to be a whole bunch (say 16) virtual devices. Each device can be passed as a PCIe device to a guest VM, and will be handled inside as a hardware device. So your Windows VM will need the Broadcom driver or whatnot, rather than using the VirtIO one.

Why do this? Part because it turns out that putting your VM host's hardware interface into a Linux software bridge disables part of the hardware acceleration. This can actually make it so that you can't reach the full bandwidth of the device. On slower CPUs this may mean you can't get to 10 Gbps.

Part because there's overhead in the VM transition and this also greatly reduces this.

I also like that it doesn't need you to fiddle with the network configuration on the host.

It's well supported, including on some consumer motherboards but you have to do a bunch of fiddling in the BIOS config to enable it.
Meta targeted for fresh UK gov’t warning against E2E encryption for Messenger
OTOH, this automatic cancellation is very useful if one wants to obtain another citizenship.

When I went through a process of relinquishing my previous citizenship, it included:

- 11 documents,

- 10 apostilles,

- many authorized translations,

- several photos (?!),

- notarizing my signature at the consulate,

- receiving two documents via regular mail from my birth country (IIRC this service is now discontinued, and one has to go to obtain these documents in person, and no, power of attorney is not accepted, and yes, the country in question is at war, so any man trying to do so risks being drafted and sent to frontlines immediately),

- several thousand euro in various fees,

- many hours spent preparing documentation,

- ~6 months from the beginning of the process to the end.
Most of the time risk analysis as it's done today is completely useless, as we tend to be pretty bad at risk assessment in general, and that is even worse in most organizations. Barry O'Reilly has a great talk on the topic somewhere on YouTube
Gparted moves it with ease.
For the same reason social science is called science. When words start to become prestigious many will attach that word to what they do.
Endlessly fulminating on this is useless. The investigation is ongoing: all the facts are not yet known. If there is a case, let it go to trial. Let the truth come to light. Do not be so quick to judge.
You do know that this paper is published in Nature, right? Unless you're an archeologist with a credible track record I doubt that you have the expertise to effectively argue that this is find is not credible.

Just because you find something hard to believe, does not mean it isn't true.
> I don't even want to install Arch the Arch way.

Then don't. You're simply not part of the target audience.
A friend of mine works there and commutes daily from Berlin. She said the train won't change that much. Before that, they had a shuttle bus service.
The more annoying thing is that the fast commuter trains mentioned in the article run in irregular intervals throughout the day.
Like dirty bombs, that anyone can make easily, who can make a ordinary bomb.
> If it ever happened, I guess I'd just use a try?

Exactly, you'd "just use a try". Instead of not using it.

> Much of the time "checking for null" consists of adding a single question mark.

Note: this API was introduced way before the `?` was even thought of. Which tells you a lot about the quality of the API.

So. Just for the simple task of selecting elements:

- you have to different APIs for "select 1 element"/"select multiple elements"

- these APIs differ in their behaviour. They can also throw

- almost none of the DOM APIs work with the return values of one of those APIs (e.g. your example stops working the second you use querySelectorAll)

On top of that:

- none of the DOM APIs can be chained, or combined in any meaningful way, so if you want to do more than just call one method, you're up for some very verbose and tedious boilerplate
Basically nothing compares to the portability of FAT based.
It's ironic not because of the cars but because of the garbage that is Hyperloop and the Boring tunnel stuff.
There's a lot of comments here so I may be asking a question that was already answered, but will the runes be explicitly importable in non-Svelte files? Or does it use an approach similar to testing frameworks like Jest and Vitest where you have access to them as globals? I'm thinking of the implications for TypeScript. I usually opt out of globals and import explicitly when I can.
but it is YAML's fault that it introduced this silly mistake in the first place
> mtimes can definitely be edited, if you have permission

It just requires you to be the owner of the file (https://serverfault.com/a/337810), no special permissions. On the other hand, editing the ctime is not easy -- it requires tricks (e.g. change the computer clock, which typically requires root privileges).
Indeed, removing values from a map while iterating over it in Go is safe and guaranteed to have the expected behavior.
The issue is, much like the us, the UK is a representational democracy.
You vote for officials who you hope represent you and they often don’t.

Also you’re assuming that users leave platforms because of security issues and that’s obviously untrue for most people. I mean… just look at almost any social media platform
In Ben Franklin's autobiography, he described his journey from Philadelphia to Boston. It took two weeks by boat, traveling down the Delaware River and up the Atlantic coast. The shipped wrecked off the coast of Massachusetts, and he had to swim to shore. I guess the TSA lines don't seem so bad in comparison.
Nah, "be profitable" is enough, once you go down the details.

For example, if every change to the Google homepage needs to be profitable, then they can't ever make ads easier to ignore.

Scale that up to data collection etc, and you get Google today.
Parallel Decoding in Llama.cpp
Is any BSD superior for such use cases?
I think this hits the nail on the head. Pretty much everyone here in the UK is just waiting for the general election to remove the incumbent right wing party. The government itself seems utterly internally divided and unable to find a direction and after a while everyone (cabinet ministers included) is just waiting for it to be over.

So this slips in and most peoples reaction if they know about it at all is "this is not legitimate because the people enforcing it are so weak"

Basically it's set up to be ignored - a populist press release dressed up a legislation.

Worrying
> JSON is simpler to map, faster to parse, simpler, more lightweight

JSON is no simpler (nor more complicated) than XML, if you're using a library. It certainly isn't faster - a SAX parser is faster than a JSON DOM parser (and JSON streaming parsers equivalent to SAX is rare).

> It has replaced XML as the standard data interchange format for a reason.

the reason isn't technical. It's competency (or lack thereof). Most interchange formats are for websites in browsers, where JSON performs well, since there's no native way to parse XML in the browser. So that mindshare from the web has leaked out to other arenas.
Just try it? Didn't want to have a pissing contest, but if you will.

I've have, since late 2000's and used it to deploy production deployments for eden.sahanafoundation.org in Haiti, Chengdu and other places, using Proxmox and KVM.

I've also built public and private clouds using OpenNebula and OpenStack (using KVM/libvirt). I'm also vmware certified (or was, back in late 2000's, when working for a prominent UK ISP).

It's a management framework, it doesn't do virtualisation itself, it uses the libvirt framework. I can use the same kvm hypervisor by using qemu-kvm (or virt-manager, which uses the same stuff). Again it's just a management layer.
Exactly. The historical remains that we have are all very biased compared with how people lived.

Even from a few hundred years ago, there's not much record of how the average person lived. Most things that survived are stone castles, and other remnants of noble life.
The organization giving the experimental drugs with the view that it will pay for itself in relevant research and treatments that come from the testing.
Could be Alameda misrepresenting the situation. Doubtful that Binance would be able to tell whether Alameda's accounts were running an algorithm or manually trading
Nope, that's probably not enough. With regulation, you have to do two things:

- Show that you are aware of the regulation

- Implement some kind of thing to comply with the regulation. The degree of that is debatable and ultimately can only be decided by a court.

Just pointing to a ToS is not enough, because nobody reads them.

Implementing a geofence and denying service to UK ip addresses is probably a good start. If UK citizens want to access your service, they could still use a VPN, but then the "malice" is on them.

The bigger/widespread your service, the more effort you might have to put in to prevent malicious intent.

Think about this way: You are liable for the services you offer. You must comply with local laws. It's up to you how much liability you want to carry. If your compliance with laws is extremely weak, your liability is high.
Here's a more up-to-date link to [1] as it is now published as RFC-9413: https://www.rfc-editor.org/rfc/rfc9413.html#name-virtuous-in...
Ask HN: I'm a SWE without a CS degree. Will online certs help me get into FAANG?
I studied humanities in university. But I've been programming since I was a kid, so it was a natural career choice. I regret not doing CS. I work for a public sector org and have been promoted to a senior developer.

But I still don't think this is enough for me to make the move to FAANG or other tech companies unless I stay here for a long time to rack up experience (I only have 2 years SWE experience at this point). Also, as the org I work for is not a tech company, I'm not sure how seriously recruiters will take my time here.

I've studied data structures and algorithms, and I think I am a decent programmer. I could probably progress quite quickly through CS50 or some other online course. I just don't know if it's beneficial.

This topic online is full of misinformation and people just trying to sell you a course. So this seemed a good place to ask.

I'm UK-based by the way.

Thanks.
A lot of people in security don’t have a degree at all, let alone in computer science. Judging people’s qualifications is much more complicated than just looking at their degree.
Oldest so far. I mean let's be legit, wood decomposes easy. We know there is older, just not preserved.
Meta/Facebook was told that they don't have a legitimate interest in behavioral advertising. They'll need to ask for consent: https://thisisunpacked.substack.com/p/the-eu-war-on-behavior...

Meta also broke the record for the biggest fine this year (1.2 billion). The fines are coming, and if they go after the biggest players first (e.g., Meta, Google), it will send shockwaves through the entire industry.

When GDPR came into effect, being close to the advertising business then, I know some companies that closed shop in EU. But enforcement has been very moderate, at least in the beginning. There's also the issue that some DPAs are more active than others. On the other hand, it doesn't take a lot to set precedents, and EU countries may find that these fines are a nice way to add to the public budget.
You mean college-trained? Because GP is a CTO, so I guess he has experience. I don't respect the C-suite that much, but I've never seen CTO without solid SWE knowledge.
It's not a low quality OS in general; they just haven't really optimized the use case of people installing their OS from scratch.

Every organisation, commercial or otherwise, has finite resources. And the vast majority of their users would probably prefer they spend those limited resources on fixing things with a higher impact on them.
I'm not saying luck wasn't a factor (e.g. he wasn't hit by a bus, so, lucky?) I'm saying luck can't have been the only factor, or even a primary factor. Plenty of people try and do what he did, and fail.
Here is a quieter part

<server id=a ip=1.2.3.3 role=back /> -- < />

why do you need quotes when you have nothing to quote (no whitespace etc)?
Unless you are physically present in the UK or do business in the UK, just tell them to screw off. Treat their demands the same way you would an Iranian or Russian government bureaucrat demanding that you compromise the rights of your users. If they want authoritarian control over the internet, make them build their own great firewall.

Big tech companies are vulnerable to financial pressure, but a one admin Matrix server or XMPP server hosted in the US has no reason to comply.
Their opposition was that the motion was still in flux on the wording, and could have outright said “E2EE is illegal, we want either A) a backdoor into encryption if you use it B) on device monitoring for harmful content”.

It came to pass that MP’s realised they couldn’t do that… yet. So what has actually gone in is some vague wording on “should the technology become available you’ll have to implement it”.

Now most people are taking that as a win, that the wording is admitting defeat. Surely you can’t circumvent privacy whilst maintaining freedoms, you may as well put in “when 1+1=3”. And the companies are saying that’s fine, it doesn’t affect us.

But you can’t help but feel pessimistic. That clause is Chekhov’s gun, it’s put in there in its nebulous state exactly to be vague. I’ve no doubt in the coming years there’ll be a consensus where “the technology is available” comes down to MITM or something.
At least in Europe, railways got the hint (or rather, the EU forced their hand)... they are switching over to ETCS and digital signalling control based on standardised interfaces. Will take a few decades to fully roll out, though.
> I would argue that it needs to be more or less continuous, if we lost the technology it's a different age imo.

You're looking at history through modern eyes. Back in the past there was no collective `we`, we were much more separated as a species than we are now.

The idea that there is a global 'us' is a very, very new idea.
Israeli tank stolen from military zone discovered in scrapyard
Video coverage (Hebrew): https://www.youtube.com/watch?v=qgbxY6zB580
Ofcom are about to start a consultation with industry to figure out how to apply such vague laws.
Or maybe vendors will be incentivized to actually upstream kernel patches, plus stop making 10 different models every year for weird market segmentation reasons.
The irony is my company is starting it's annual hackathon week. The company has gone out of its way to make Google AI available for us, met with Google employees who are rolling out the red carpet to give us access to unreleased tools, features and experimental apps. We were already tightly partnered with google before this, so it all makes sense google wants to see we very successful, meaning we can never leave them for AWS or Azure.

I feel like each team is looking for a way to optimize another teams work, making them more expendable after we fully adopt AI systems. Really feels like a race to the bottom, luckily only a handful of people know what I do and they don't have access to my systems to even start trying to figure out how I can be replaced. That's called job security my friends...

I believe anyone saying AI isn't going to reduce jobs is full of crap, it's going to happen.
It’s the tories/conservatives. They love this sort of total authority stuff. They’re also keen to bail on intl human rights orgs because it limits what they can do to migrants.
....What other big games engines have you used? I've used unreal as well as some proprietary ones(Anvil and Snowdrop) and they all take more than 5 minutes to load, in case of Snowdrop it could easily be 20+ minutes if you were loading in with the game world present.
Which doesn't matter for windows installation media
Guess what germany has lots of?

Not many high mountains, but lots of high enough mountains and valleys, that you need lots of expensive bridges to pass. I happen to live right next to a big one, that was build 1850 and is now getting renovated. They are already working on it since 2 years and plan to be finished maybe next year. All this, for one already existing bridge.

There is no way you can cover even half the villages by train.

And before you declare incompetence, well first, you have to work with what you have and secondly, you have to work without stopping the existing trains too much as it is in use and alternative routes very long. (so they work mostly at night and don't care how many babies try to sleep)

Edit:

Also, do you expect that all lines get served all the time? Or do you declare that no one has any reason to go anywhere in the middle of the night?
Cars are somewhat more flexible in that regard. Also, do you know what happens if one train breaks down?
It cannot just be pulled to the side, like a car can. It will block the whole line. So even if you radicalize everything and use lots of autonomous small trains that can react flexible to passengers request(something that should be worked on today), it would not solve everything. Flexibility is very valuable. A train can only go where there are tracks. A car anywhere, where it is flat enough. Solve that, if you want to completely get rid of cars.
I wrote about this a bit in my launch post [1]:

> In today’s chat-centric environment, there’s a skewed emphasis on the ease of posting. We rarely pause to consider the broader implication: for every message posted, it’s likely to be read 100 times by other people. Yet, we continue to post more and more low-value messages, because it’s easy to do so.

> For the vast 99% majority who are on the receiving end, chat becomes a source of stress. Constant notifications require frequent context shifts. Unstructured discussions make it difficult to follow along. And, the lack of summaries means onlookers are left out of the loop.

> Knowledge work becomes more productive when non-urgent communication gets shifted to an asynchronous format. Thoughtful, long-form communications promote deeper thinking and better decision-making. This insight led Amazon to ban PowerPoint in meetings, and instead require 6-page memos to be read silently at the start of meetings. Programmers have long recognized the efficiency of this approach in their work, utilizing batch processing to have computers efficiently handle repetitive tasks. We need to apply a batching approach to our communication.

Getting the newsletter right, including relevance scoring and summarization, is a really fun opportunity. I am experimenting with some GPT approaches - it's quite really effective at summarization.

[1] https://www.contraption.co/news/launching-booklet/
It's not unanimous: https://www.theguardian.com/uk-news/2022/jul/21/uk-cybersecu...

> Ian Levy, the NCSC’s technical director, and Crispin Robinson, the technical director of cryptanalysis – codebreaking – at GCHQ, said the technology could protect children and privacy at the same time.

> “We’ve found no reason why client-side scanning techniques cannot be implemented safely in many of the situations one will encounter,” they wrote in a discussion paper published on Thursday, which the pair said was “not government policy”.

> They argued that opposition to proposals for client-side scanning – most famously a plan from Apple, now paused indefinitely, to scan photos before they are uploaded to the company’s image-sharing service – rested on specific flaws, which were fixable in practice.

Also, WhatsApp already has client-side scanning for spam link detection, so even Meta, despite their complaints about having to prevent the sharing of CSAM via their platform, aren't really against the underlying principle of doing this: https://faq.whatsapp.com/393169153028916, https://faq.whatsapp.com/667552568038157
And none of the ones you mentioned are talking about Mars colonization. I was just highlighting that holding people just pontificating about possible futures should not be held to the same level of scrutiny as a person saying "my company will do X in y years/months, give me money in advance".
Important: Certificate for Www.vim.org Has Expired
This is complete speculation, but the luminance difference between the red sprites and greyscale shirt is greater than that of the other colors.
1999, the town hall of a small municipality s/e of Stuttgart Germany. For the 3rd time in half a year me (IT apprentice) and senior developer are onsite to fix one MS SQL db's broken indizes. It's the early afternoon of friday and humid hot, a thunderstorm is on it's way. We toil on and are almost done when at about 16:00 the chief officer turns up and informs us that we have to hurry because at 17:00 all electricity will be cut in the building!
Senior developer and me share a shocked glance.
"Is this every friday?"
"Why yes! We conserve lots of energy that way."
Senior and me share another glance and on impulse I speak up.
"Isn't the weekly db cleanup scheduled for 16:30 PM on fridays?"
The senior developer nods. We spend the remaining hour to fix the problem and then cancel this weeks schedule and manually shut down the DB server for the time being.
Every friday these guys cut the power to the building, causing all kinds of production issues with not only their Netware Server but also the DB server for their collections software (our product). As per maintenance contract we were required to repair the DB everytime which was a hassle and a waste of ressources on our behalf.
In the end it took another month or so until they relented and rescheduled the hard power down until saturday morning so that all servers could shut down properly even AFTER the backup jobs could complete (backup was also totally broken but they never did check or even perform a restore so they never actually noticed).
Linux is not a company.

You pay microsoft for that support.

You can have 10 years support for linux, just pay red hat for it like you pay microsoft.
What would be a good country for vpn exit point? Something in Europe due to latency

Nothing to hide, but this just rubs me wrong out of principle
Prompt-based iOS app for videos and AR experiences
Make your videos and let us know what you think. It's a paid AI creator, but you can write to hello@spelly.ai for free credits.