skysight-inc/HackerNews huggingface dataset:
> Git commits are stored on disk as snapshots, but that's not necessarily how Git treats them! Various Git commands treat a commit as either a complete repo snapshot or as a change set, depending on what you’re doing.

The problem is that the documentation and the developers go between these modes so fluently that you have to know the context in order to distinguish them. Of course to them it's obvious that you are treating the incoming changes as a “changeset” since it's a diff (a patch) from an email (not a snapshot).

This is the “name” section for `man git-rebase`.

> git-rebase - Reapply commits on top of another base tip

How should someone new guess that this means to (effectively) take the diff of each commit and applying those changes? Instead of working on the snapshots?[1] Because I think you could also interpret it as: take the tree (the snapshot) of each of these commits and make an alternative subgraph where the parents are different, propagating from the new base tip. Which means that you can make a new root commit (disregarding old history by “squashing” seems to be popular on SO for some reason) starting from A by rebasing A on `--root`. But it doesn't work like that.

If you want to do that you should instead use git-replace.

In my experience, for every little question about cherry-picking or rebasing, you have to go down to the fundamental concepts. Because the way people work is not like a sponge which only absorbs the information that it is given; people learn 10% about something and then automatically infer the rest, and sometimes 50% of that is wrong. So then you have to unnest that.

I guess this is my long-winded way of agreeing with the author.

[1] Working on the snapshots would also be useful. You could use that to format all of the commits on the branch.
Hopefully this is an all-around improvement over the last year, and I'll see how it goes, but I've gotten a little concerned about all the blind dependence that a lot of sites now have on Cloudflare.

For one reason, I recently spent months with Cloudflare blocking my Firefox ESR from many sites, including 2 key paid ones for work.

When both companies showed zero interest in trying to figure out why Cloudflare was doing that, even if they lost a customer, I had the thought that this is probably what it's going to be like with a lot more things.

We all know some of the key huge companies that do the math about how many users they're willing to lose/screw, to gain some other advantage or to reduce some cost.

But Cloudflare might be one way that small companies will have no choice but to lose/screw users in an uncaring way, like they were those uncaring huge companies. That might hurt the companies eventually, but it will tend to hurt many users first.

Fingers crossed that at least Cloudflare is rising to the challenge to not become a resented Kafkaesque institution.
Aren't we all trusting Fulcio and the other Sigstore infra in the same way? This reads like a belittling cope to me
I think similar to humans, creativity will be an emergent behavior as a result of the intelligence needed to pass other tests. Evolution doesn't care about our art, but the capabilities we use to produce it also help us with survival.
I see this argument a lot, yet it falls apart upon closer inspection, I'm talking a few dollars a month to put your best foot forward at jobs that suit you rather than spray at basically every single open position and take whatever you can get.

Try to see this from the other side of the equation.
^ For non german speakers, Arbeitsloser ~ jobless person, i.e., someone not employed or working.

Edit: The book is awesome though. Definitely recommended. Marc Uwe Kling also has a great series of works around a kanguru.
& slash
I think of branches as variables pointing at immutable points in the commit tree. Git commit creates a new node in the tree and updates the pointer. You can manually move pointer around if needed.
> Also, Git's CLI aggressively obscures those core concepts, so any learner is in an uphill battle even if their mind does happen to work the right way

Thank you, that resonates
> but it's impractical to use those without middlemen and you forgot to say "without huge fees".

It seems your information is quite a bit out of date. These hasn’t been true for a long time.
Some do, some don't and don't consider it a vulnerability when reported.
I wonder how you decide if the influence is positive or not
Show HN: Curated List of Commercial Open-Source Projects
Hey everyone, I built FreeXP.dev to help developers find interesting open-source projects for them to start contributing!

Most of the projects here are commercial.

Commercial open-source projects not only can help to showcase your skills as a developer but you can also have an impact on a real business.

Finding commercial open-source projects are hard, FreeXP.dev makes it easy.

p/s - this project is also open-source, so feel free to submit your projects as a PR!

https://github.com/afrieirham/freexp
It is important that we all know that if we intentionally configure our networks to draw attention from automated scans that we will draw attention from automated scans.
> Totally, but for how long?

Since it's published with the GPL-3 license, I don't expect that to change. Even if there were interest to change the license and all copyright holder agree (which is generally not feasible in a long running FOSS project), there surely would be a fork, if the software is then still popular.
- said jononomo on a social media site
As is the iPhone. Chinese manufacturing is unparalleled.

Comac is also quite instructive.
Yup, keep the zero-days comin
FWIW, I did the same job in the army. I have no desire to share my experience with anyone… but I left the US and I have no desire to go back except to visit family.

Maybe that means something, maybe it doesn’t.
Websites should mitigate credential stuffing by checking against known cracked passwords. All you have to do is download Troy Hunt’s hashed password database, check it when someone logs in and if it’s cracked do your email password reset flow. Or you can use their API.

It’s very simple, and I believe has been an accepted best practice since like 2017. This is 100% on 23andme. They are responsible.

1. https://haveibeenpwned.com/Passwords
Infinitely chainable expressions, .let, .also and friends. You shouldn't overdo it (lengthwise) and it's almost hilariously superficial, but I miss it in every other language since.

Tying down a value to a name only if you have something meaningful to say in the name, and only when the value is actually finished instead of being a work in progress, that gives me great piece of mind and frees up mental resources for other things. I wish every language had a "kotlinized" sibling that simply added the scope functions on syntax level (or a subset of the scope functions, not sure you need a zoo that size)
This is a silly argument. Making a language _memory safe_ protects against one class of bugs and that has merit in and of itself. The fact that there are more classes does not negate the value of that. To borrow(lol!) your own analogy here: it makes $language Safer. Not safe.
Sone examples shown are better described as Détournement, but maybe Appropriation is more neutral and generalist. In any case copying is the most basic tool in the creation process. Some artists show they copy, others artists lie about the source of their "inspiration".

https://en.m.wikipedia.org/wiki/D%C3%A9tournement
I tend to agree, however it took learning about git internals to get to this point. Most developers don't read stuff like that. Also git creators made the mistake of using terms like add and checkout to mean completely different things to older version control systems. I think that's where a lot of the confusion stems from.
There’s a chance something like this ends up happening in the West as well. Could be watered down in some way. It only takes a couple more columns in the database of a credit scoring system to start looking at other factors.

These systems being deployed in countries such as China and Russia gives the rest of the world a peek into how it works, and a chance to understand how to best resist totalitarian tendencies. Unfortunately it also gives an opportunity for other governments to learn what works and what doesn’t.
>It is like going back to insisting you can and should be absolutely safe from HIV by making certain lifestyle choices. In the '80s we knew that the answer was being safer, not being safe.

This is a singularly bad analogy. HIV used to be a death sentence, but now we have effective treatments and prophylactics.

What's the PrEP equivalent for buffer overflows? There isn't one.
It sounds neutral to me. They might well be collecting the data but I don't think the implication is there.
I didn't say that the huge fees are unavoidable, but they're the norm.

And okay, tell me about how I get some cryptocurrency in a practical way without big middlemen.
No. Feel free to ignore it.
My big issue with Git is the way it handles Merges.

It throws up this dialog saying "there are conflicts", and by the time you see this, it has already monched a bunch of files in your local version and now the only way out is through. You need to drop everything and fix all this stuff right now before you can proceed. Even if it's last thing on Friday night and you'd rather just go home and try again on Monday.

If there was just an "Abort" button that stopped trying to push or commit or whatever and just put things back the way they were before, that would take all the worry out of it.

Because usually it would have been easy to avoid the conflict if only you knew it was coming before Git f'd your whole project.
Typescript’s type system is deliberately not sound though.

In general, there is no type inference available for OOP type-hierarchies as opposed to a more Haskell-like type system, where Hindley-Milner works
It’s good for unions to be worried about there being fewer jobs in the future, but one thing is certain: it takes less labor to not build cars at all.

_If_ the number of workers in the industry is going to decrease, the unions should discuss with manufacturers how they’re going to do that nicely, e.g. by helping them get another job, by letting elderly workers retire earlier, etc.

This article points out that may not be true, though. If so, unions should negotiate on such things as training workers on building electric cars with light metal bodies.

I don’t think American unions are good unions, though, so if the amount of labor goes down, they’ll probably try to find ways for it to require the same number of workers, making American manufacturers less competitive.
While there are several new concerns brought about by this, which I agree with and are highlighted in other comments... I wanted to celebrate the good news part which is seeing fewer captchas. I hope other operators can follow suit and replace their solutions with something more universally human friendly. Browsing the web should not be a harrowing experience for the people it was made for.

It's quite typical in our industry to churn something out quickly, which isn't always suitable, but sticks around for a very long time, before something better comes along. I hope captcha can be relegated to a historic footnote some day.
Thanks for the report. We'll take a look, Safari pointer lock is sometimes a bit fickle and we have a regression there!
Yup. I run into this a lot with Firefox and it's super frustrating when some website's homepage just gives you a cloudflare error and a message that says "bummer bro, you're not allowed to see this. Here's a Ray ID that won't actually help you fix the issue"

I've let airlines and other companies know that Cloudflare isn't letting me buy their products but unsurprisingly they don't care (or tell me to clear my cookies)
Uhmmm, don’t know what to say to that, that’s the reality for me and many others. Not a few steps away, and maybe 15 mins is a bit optimistic for everything, but i have all that in max 30 mins walk
GPS is US government invented, owned, and operated. Reagan made it free for use by anyone.
Apple seems to be remarkably consistent on this front. Cocoa on macOS and AppKit on iOS, now both moving towards SwiftUI.

On the other hand Microsoft tends towards the other extreme. It seems to be continually at war with itself.
Yes, there is. The human brain is a rather primitive hunter gather apparatus, that resorts to brutal aggression & societal decomplexification the moment the endless surplus ends. Hoping that better tech saves one from this, is like believing that going all in with higher risk, will save one from bankruptcy due to gambling.
Just want to say I super appreciate your balanced perspective here. I'm not a security engineer by trade, so getting this sort of feedback is quite valuable.

The no@ scenario is an interesting one. The opt-out would certainly be one clean approach here. Going to give it some thought!
Which proves the point that Glassdoor is lying :-)
I'm new to properly native languages, but having worked with Rust for 6 months, I've yet to encounter a single crash that wasn't on part of my error handling.

I _love_ C and I've written one C program every year for the last decade or two. I generally write something really stupid, but there's going to be crashes that "prints the stack pants." As in: I'll fudge up returning the stack from a function, basically.

This proves nothing, of course. But Rust won't even let me fudge things up that way. This means that I have more time to spend fixing those other classes of bugs and that is the win!
These rumors are also circulating in Russia: https://habr-com.translate.goog/ru/news/765866/?_x_tr_sl=aut...

Here's what AI can do with this article: https://www.phind.com/search?cache=o2wo1bog0dfjwj49vwhhgqgv

However, I wouldn't be surprised if this development is true, given that Russia is currently a totalitarian state. It is one of three countries that kills North Koreans who flee their country (along with North Korea itself and China), kills Ukrainians and its own citizens. Russia enforces totalitarian laws against any spoken or written words that criticize the government.
Curious how you think people existed before cars & bikes were invented? Horses were expensive and few had one.
What do you mean “without concurrency”? One program runs entirely before the other starts?
I wonder if there's a good reason why Google doesn't offer a subscription option for YouTube alone? They tried it once (YouTube Red) some time ago & dropped it fairly quickly.

Totally uninformed speculation: maybe they found that it was their most profitable viewers that were paying for YT Red? Which in turn would mean that any subscription program would be a net loss over relying on ads for income.

You could just say "charge more" of course, but maybe that higher charge is more than those customers are actually willing to pay for YouTube?

Which in turn would mean that ads will always be more profitable than subscriptions for Google.

In this model YouTube Premium, which includes Music, might be sufficiently expensive that it ends up profitable overall thanks to the bundling of YT & Music together.
I'd be interested in other DDoS mitigation providers for any site in the sub-$100/month price category. The only other ones I know are Amazon and Microsoft, and those tie you to their clouds.
There is an "Abort" button. It’s `git merge --abort`.
I played it on the C64 as an 8 year old. 30 years later I don't understand this code.
I just will say regulation doesnt equal ban. And that i am pretty sure EU didnt ban open source, RISC-V, encryption or software distribution.
Some EU member states politicians have stupid ideas about communications/encryption so they push proposals but these are also often corporate lobby to gain more control over the networks. And afaik nothing has passed into actual law.

If anything EU has been generaly aiming their regulations at the american big tech which many see as vultures feeding on users and most importantly avoiding taxes.
Once these intelligences can both read and write blog posts, product metadata on webshops, etc., could they carefully encode executable code that would allow them to "escape" the sandbox of their cloud environments, becoming fully-fledged Turing machines living in the wild?
For the software part it's weird because most of the time ideas happens instantaneously.

I think solutions appears once I understand something about the problem. Solutions are then explored by my own mental compiler or interpreter, I can run them mentally and see where it fails or not.
Problems are mostly a language problem, if I can describe the problem then it's not a problem anymore but almost the recipe to bake a solution.
Complex problems appears when the sentence to describe them becomes too long (That's what it feels to me).

Having a focus problem doesn't make you unable to solve complex problems, but rather forces you to break down complex problems into blocks, or to use abstractions to describe solved parts of a complex problems, or something else of that type (again, that's what it feels to me).

Having a focus problem is like having too few RAM.

If I count the numbers of windows in my house, I can do it mentally, by flying through my house, but I can also fill my house mentally with water and swim around to count them (and I would almost feel the cold water on my face and body and hear what you usually hear when you are underwater and etc...). I can also go outside and count the windows of my neighbors, and take a walk in some place I saw one time in my life. I can visit Roma if I want and all of that stuff.

It's like I can trick my brain into thinking I am really in the situation I am thinking about.

It's different from reality, but I don't know how to explain why and how it is different.
Just speaking from a hip-hop perspective;

Appropriation is stealing well.

Good stealing is obvious, fair, resonant, clever, unexpected and
pointed.

Since the appropriation is part of the art it needs to be up front.
Don't be obscure, or try too hard to hide the grab. Even better if
it's audacious.

There is a sense of fairness amongst artists. Stealing a well known
icon is okay, but to take the riff of rival, little known artist is
plagiarism.

There must be a cultural or semantic resonance. Even if, as in
Dada/Surrealism it's an incongruous juxtaposition. Something needs to
link or amplify. Otherwise you've got a collage or mish-mash of
"found" stuff that doesn't hang together, and that is considered
immature.

A clever steal makes the thing you take feel like it always belonged
more in your piece than the original context. That's hard, but it
happens and its wonderful. Maybe you take a grab that forms the
perfect cadence to an entire song you wrote, or just a sound whose
harmonics make the perfect missing parts to another chord.

A completely leftfield steal borrows from a genre that is totally
unexpected. There's a balance to be struck with obscurity here.

Finally, all of these combine such that an appropriation has a
point. It communicates an idea, through juxtaposition, association
or whatever. It references. It's a homage.

I know that the hidden question behind this post is "Does AI
appropriate?"

I don't think it does, because it lacks the intentionality of the
above points. But humans are great pattern matchers, including seeing
patterns that are accidental, so we mat read into AI and see
"appropriation" - but only in its most mechanical sense.
I tried to add the `git log` alias which didn’t work for me.

The much simpler `git log --graph --color` works great.
I can draw sort of ok, but only because I've practiced a bit. I can visualize quite well, I assume because of some innate ability + I practiced extensively as a child for fun.

It is definitely a skill that requires focused training, at least in my experience, so it makes some sense that the average person wouldn't spend too much time going out of their way to practice. If I get out of the habit for whatever reason, I'll slowly lose proficiency at quickly and easily picturing objects in near life-like detail, manipulating them skillfully, rendering complex scenes, holding images with eyes open or under distraction / activity, etc.

Objects will start off grainy/foggy by default and only clarify if I really can focus. Scenes and large complex objects will be much harder to hold together as a whole with distinct parts/areas. Changing an object results in more fog or losing the image temporarily. That kind of thing.
The only way out is through?

git merge --abort
I think you are probably right. It's very easy to get stuck in a career dead end in technology and digging yourself out can be difficult.
There are cars from the 90s that put the seat belt on automatically when you close the door. It looks awful but it works.
This is a good thing.

Generally, you shouldn't block fingerprinting from inside the browser, it is only a fool's errand that provides a false sense of security while being open to exploits, new techniques, bypasses and broken sites.

If you want to be safe from tracking, run your browser sessions in separate ephemeral containers or even VMs and trash them regularly for example. Qubes OS is at one of the extreme ends of this, but Chrome profiles are sufficient for the vast majority of use cases.
Have you seen the HypeHype renderer talk?
ALDI gets me through the checkout faster than I could do it myself at the other large grocery chains, primarily because they have put in place efficiencies throughout the whole supply chain. Eg the Barcode is as long as the side of the box it's on for most items, and the PoS machine is simple with highly optimised lookups so you can scan a hell of a lot of product quickly. My local self serves need time to think between my lazy scanning, and then time to think about every other step along the way. I'm almost convinced a study or three have suggested that the slower the software the more chance I'll purchase the chocolate next to the machine.
I don’t know about criminal liability, but they’re certainly at fault for not implementing a check against known compromised passwords[1]. I believe it’s been an accepted best practice since something like 2017.

1. https://haveibeenpwned.com/Passwords
Interestingly, although my Firefox ESR passed the test, that page immediately made my laptop's fan spin up (normally only does that on media-heavy pages) - possibly thr "proof of work" test they mention in the article?
I don't think I have ever met a beginner of git that hasn't fucked up their repo to a state where the effort to get back is more than just redo everything. In the beginning the fear is paralyzing and it is not without reason.

For sure it is recoverable, but not to a beginner.

I do agree that fear is a very important factor. I disagree that it was easier to do things wrong with SVN.

The times I got in a weird state with SVN was usually related to a merge. But it was the clunkiness of the tool and not fear of loosing anything or not having a way out. Last resort was just to do the merge manually. No risk to it, just tedious work.
Hehe my exact first thought as well!
It is not hard and every web service really should implement this sort of check. I’m actually pretty surprised to see so many comments here that aren’t aware of it!

See: https://haveibeenpwned.com/Passwords
I haven’t come across anything specifically for this use case, but you could probably achieve this using either json-schema or by using struct tags from the go-playground/validator package.
Oh, there are lots of PrEP equivalents. For example NX. Or virtual memory more in general. Or static analysis. Etc etc. If you think the modern ecosystem is as memory bug prone as it was in the 80s, you are being incredibly naive.
Honestly, that's hard to explain; I truly see colors, shading, lighting, can touch textures, feel weight of objects and etc... It's just that my body isn't truly performing these things.
How do you remember a scene from your childhood ?
Because the SIMD registers are a fixed width and the memory bandwidth is fixed, so you can process more values of a smaller bit width per unit time.