skysight-inc/HackerNews huggingface dataset:
> One issue that I, now that you mention Javascript, is stuff like npm, but to me that more a sign of npm being badly broken by design, or at least designed for a different environment.

npm being "badly broken by design" is one opinion. But the fact is that almost all modern language tooling is moving in the direction of becoming more npm-like or has been created from the beginning with heavy npm inspiration. See for instance Rust's Cargo, Dart's Pub, Go's modules, Python's virtual env, Esy for Ocaml, and more. Developers love being able to easily manage and add dependencies, and this problem is only going to grow for Linux distributions across language ecosystems.
Simple: there are nutters out there that will kill because they didn't like what someone did to a Wikipedia page they care about.
One of the things I found interesting about this paper is that they find that there were more contributors in Rust projects. The first headline I saw posted from this paper was that first time contributors to Rust projects are 70× less likely to introduce vulnerabilities than first time contributors to C++ projects, and my immediate gut reaction was that this could be explained if the Rust developers were generally more experienced programmers. But as the abstract points out:

> We also found that the rate of new contributors increased overall after switching to Rust, implying that this decrease in vulnerabilities from new contributors does not result from a smaller pool of more skilled developers, and that Rust can in fact facilitate new contributors.

Which seems to imply the opposite of what you're suggesting, i.e. it implies that Rust makes contributing easier and safer than C++.

I also want to point out that your comment isn't accurate about how Rust's unsafe works:

> [T]rying to avoid these runtime mitigation strategies [...] will require doing some level of unsafe stuff which the compiler doesn’t help with you

(Emphasis my own.) This is inaccurate — the borrow checker is not turned off inside of unsafe blocks, but instead you are given a handful of extra APIs to use. Those extra APIs can be used to do things that the borrow checker would not normally allow (e.g. by converting checked pointers into raw pointers, and then inside the unsafe block, dereferencing those raw pointers), but the borrow checker is still active, and still catches all the same errors as before.
Isn't that only for failed commands? so if command succeeds with warnings, or if if fails, but the retries and passed, ghen you get no output.
Before they went down it seemed that there were many big publishers who got the owner to disable it for their sites. Either that or the sites learned to actually not send their articles unless the user is logged in (and didn't care about googlebot not scanning it).

It was just an effective way to get through substack/medium in my experience.
Let's assume your C SDK defines MY_GPIO as a pointer to a volatile memory mapped I/O register. Lets further assume that your project uses interrupts (or preemptive multitasking).

Your trivial one-liner is an example of terribly seductive simplicity enabled by a broken design. It works until MY_GPIO is concurrently modified. Which can happen if the memory mapped peripheral changes the register content on its own or if other code can preempt read/modify/write sequence. To make it worse unless MY_GPIO is heavily contested it will work most of the time.

I'm not familiar with embedded Rust, but it looks like APIs are designed to make the programmer explicitly lay claim hardware peripheral (or fail trying) instead of corrupting the system state. Most of the unwrap() and unsafe code is executed once during setup. Once the hardware resources are divided up and configured the normal runtime code should be a lot less verbose (from a quick look at the API documentation).
FWIW, RSA is well known to be difficult to get right because you have to select the primes very carefully, and must take explicit steps to avoid padding oracle attacks[1], and perhaps it's better to avoid it entirely.

[1] https://blog.trailofbits.com/2019/07/08/fuck-rsa/
> those teachers too were probably doing their best, and making mistakes, as we all do

Some people are simply arseholes or incompetent and others have unresolved issues. Compassion and empathy are important, but I don't think we should project good intentions onto everyone. I prefer to assume that a teacher who says verbatim that a 6yo is "naturally bad at *" is a bad professional, and an arsehole.
Aside from this (which is already very shitty and would cause the same response in me) what are the issues you’re running into with Vercel?
> The risk of being debanked by two independent banks _at the same time_ seems lower than crypto.

I use 3 separate banks for this reason. But honestly, the 'reason' for dropping me might be a 3rd party risk assessment that flags something and services all three banks... Or some sort of story or hysteria that could trigger three similar systems.

Using a decent crypto currency with good practice, the biggest threat is me messing something up. And i can put systems in place to minimize this. The only issue is that most things i spend moneys on don't accept crypto and so still need banking services to use crypto. I hope this changes.
Is that a Slashdot reference?
That's inherited from OCaml I think.

https://www.ocamlwiki.com/wiki/Enum
Show HN: Root Cause Search – A Search Engine for Health
Thanks. Now how do I get an alt store…
For some reason all the alternative "archive.XYZXDHWIQHDQ" type of sites always give me a captcha page, and I am never able to proceed. I'm assuming its to do with the cloudflare DNS, well if they don't care to fix it on their end, I don't care to use their service.
Ooooh that would be awesome ! How do you imagine it ? You enter an email or first name/last name and it deletes all of the unused accounts linked to it ?
A bit besides the point, and not exactly disagreeing with you, but in my experience (living in Italy for over a year now) most Italians don't own a high-tier espresso machine. They have a cheap aluminum moka pot or a nespresso pod machine or perhaps a lower-tier Delonghi, etc. As a coffee nerd this surprised me a bit. I think part of it is that frequent and mainly fast coffee is prioritized over great coffee. Also, you can go get an espresso made on a god-tier machine at basically any corner for 1-2 euro.
I think it is an appeal to authority. Consider this, imagine Eisntein had some new idea about physics, he couldn't just say trust me because I'm Einstein. He has to write out his reasons and proof and his words will be judged on their merits and not on his identity or expertise
Funcom’s Dreamfall, one of my favorite games of all time, has something to say about where this could go!
get a powerful water gun and zap them with it - works well, and is extremely satisfying (for you, not the squirrel)
I see what you mean, but I don't think this is how it always works in practice. In these jobs the lines are often blurred. Some companies don't have all of them, and, say, the COO might do what would be a CFO role in another company. In a strongly tech-focused product (like a PaaS or something), the CTO could be effectively doing a CPO role. In many places the CTO may be the CISO as well. In a company that depends significantly on "financial engineering" the CFO might have quite a deep say in the product direction.

You're right that Musk is not a textbook CTO, but I think he has been quoted as saying he's also CPO, and that fits a lot better.
Technically, people wishing to use crypto as a bank account would care as much about the exchanges as a ‶normal″ bank customer should care about regulation enforcement on some random bookmaker; both run on [insert currency], but that's about it.
Mmmh i see
If it's functioned for 25 years why does no one use it for their ecosystem?

There's a wide range of package managers in the wild that exist to help build software using features that apt fundamentally does not support because of its broken model of the universe.
I remember going to University of Washington. When I got into the freshman dorms, I met my roommate and his older brother excitedly talking about how the library there was considered the 2nd best pickup place in the country. I still don't know what that meant and I certainly didn't contribute to the statistics. My how times have changed.
thanks for the info :)
I found that Copilot sped up the trivial things (boilerplate, simple APIs, popular algorithms) and routinely messed up the harder tasks (user flows, composing several functions meant to work together, etc.). It was a net negative for me and I stopped using it after a month or two of experimentation.

I did use ChatGpt to replace stackoverflow a few times, and for that it was super helpful. Stack is so full of junior modding closing useful questions left and right with no clear links to the answers. ChatGpt just steals all that content then summarizes the answer, lol.

Overall no faster or slower. But definitely higher quality than humans being argumentative pedants.
I'm recently passionate about motivation. I'm on the lookout for ways to keep me motivated. I always thought burnout is not my problem, until it hit me and now I'm looking for cure.
Old XKCD joke (maybe coming from an older joke)...

https://xkcd.com/149/
I really don't understand this kind of comment. I used to be a mac user only (still have a mac) and kind of hate on windows. But nowadays I use windows daily and I find it stable and mostly trouble free. Yes, there are some bugs, yes there are some annoyances. But it is super cheap, runs easily on a lot of hardware and can run games for hours on end with zero issue.
I have gotten less blue screen / complete lockup than I have had kernels panics from macOS.
I think the hate must be a stupid snob thing because while there are issues it is not like there is no issues on the competing OSs...
Yes I am running Windows 11 ; on "unsupported" hardware !
I think those had analog FM receivers. HD radio is digital FM, you need a special tuner for it.
The article is from 2021 btw, the title should be updated.
> It really surprises me that it takes so long. This has been a talking point at least since 2018 [1]. 5 years and nothing has changed.

> How is that possible, and acceptable?

That's because the FTC came under new leadership in 2021, and the previous leadership were incompetent/lazy/possibly-corrupt morons.
The study's omission of controls for a social desirability bias might skew its findings, or at least I didn't see anything mentioning one. Considering lingering stigma about using dating apps, despite the large change in acceptance, it wouldn't be surprising if people under-reported heavily.

This is evident even in this discussion where college students are partially stigmatized for resorting to dating apps amidst a sea of peers.
I feel like inefficient but convenient has been the default trade-off in so many places during the last couple of decades. WASM is opening the doors for all kinds of new solutions. I wonder what kind of cultures will develop around it, as regards efficiency.
Mastering DOM manipulation with vanilla JavaScript
See comments below. You are talking about SF in the past ten years: I am talking about the next ten.
C developers basically invented vendoring - loads of C libraries are distributed as "the whole library is in a single .h file, just copy it into your repo"
> these features should be part of a browser extension

You mean like Bypass Paywall Clean?

https://gitlab.com/magnolia1234/bypass-paywalls-chrome-clean
Intuition Machines, Inc. | REMOTE worldwide | Full-Time

Intuition Machines utilizes AI/ML to develop enterprise security products that serve hundreds of millions of users. Our engineering team is distributed worldwide, working on both backend architecture and data. We maintain simplicity - lightweight specifications, small teams, and rapid iteration. No unnecessary bureaucracy, just delivering exceptional products.

We are looking for a Staff Engineering Manager (Core Products)
https://apply.workable.com/imachines/j/C2B64C4C3C/

As a staff engineering manager at Intuition Machines, you'll get to work hands-on with our talented team to shape the technology behind hCaptcha. You'll guide projects end-to-end, mentor developers, liaise with product, and drive large initiatives that impact millions. Our stack includes Python, React, and other modern technologies.

If you like what you've read, but this role doesn't seem to be the best fit for you, feel free to check all open roles:
https://apply.workable.com/imachines/

Among others, we're also looking for:

Staff Engineering Manager, Python Backend
https://apply.workable.com/imachines/j/59C6510A87/

Security Software Engineer
https://apply.workable.com/imachines/j/33186FF81E/

Senior Python Developer
https://apply.workable.com/imachines/j/E26E4247D8/

SREs
https://apply.workable.com/imachines/j/87DAEDD448/
> Mentioning that "modern" (12 year old) c++ does not have these problems gets downvoted.

I'm not a C++ user but I thought that all of these things are still in "modern" C++, that the new editions only add things, not remove? Are there tools that can automatically rewrite existing code to use the "modern" features?
Anecdotal, but all of the men I know on dating apps were the ones that would get up and go ask any woman out before.

The ones afraid of rejection are still afraid of rejection.
It is enough, but only if you collect a good sample. I'm not sure what a good sample is. In college I'd expect a big difference between undergrads and grad students (as students get older they are more likely to settle down with someone and marry, so even seniors vs freshmen should show a difference)
I hated Phabricator for all the years I had to use it. The expected workflow was completely impossible to understand to me. And the name of the tools completely opaque ("Herald"? "Maniphest"? "Phriction"??)

We ended up switching to Gitlab because Github-style code reviews are just so much easier to deal with. They hit the spot between "good enough" and "easy to use". Phabricator's bloat made it unbearable
It's not a "market" if there's no competition.
Tools to reduce your company's website carbon emissions
Single member LLC should really be its own business type in most states. Lots of special rules apply to them and only them.

The benefits of S and C corps don’t really come into play with single member LLC
Bart Simpson: This is the worst day of my life.

Homer Simpson: The worst day of your life... so far.

Just wait until places like Bangladesh really start seeing climate change hit.
Evidence supports that it is, in fact, located just outside of Orlando, FL.
This was a joke don't fuss
Does this mean that the Racket and Chez teams will merge as well? I always liked Racket, and use it on spare time once in a blue moon (not enough hours in the day), but I am out of the loop on Chez vs Racket.
One of the features I use in some (larger) environments, which isn't on the roadmap or implemented is LDAP support in sudo-rs.
Using the regular sudo, this allows you to manage the sudo permissions for the entire network from the central LDAP configuration, and even make rules that are time/host/user/command limited in a central location with no chance of simple syntax-errors wiping out your entire configuration, just that single rule is being ignored in this case.
North Korea has ballistic missiles... the oppression and starvation levels don't have much to do with a country's military

I assume you're hinting at Gaza, oppressed ? I guess you can make that argument, but not that much. Starved ? At 25% overweight/obesity rate this is a comfy starvation
Sleep Habits, Preferences Consumer Survey 2023
They are less common than before, but over 1000 trains still derail every year in the US.
>For several years now, there have been talks about China catching up or even overtaking Western countries when it comes to innovation. But what concrete signs are there?

Technical innovation is not the same as "here are some huge FAANG-style companies". Baidu, Alibaba, Temu etc are also not about innovation, nor is Google, X, Facebook, and co (glorified internet scale crud apps) are not about innovation in their main business. One would think that capturing the hostile US/EU market is also not a goal for Baidu, Alibaba and co (they'll just be litigated away).

The critical technologies are not confined in the Googles and Facebooks of this world, the most critical ones are under the radar when it comes to the public:

"China leads the world in 37 out of 44 critical technologies, with Western democracies falling behind in the race for scientific and research breakthroughs, a report by an Australian think tank has found. China is in a position to become the world’s top technology superpower, with its dominance already spanning defence, space, robotics, energy, the environment, biotechnology, artificial intelligence (AI), advanced materials and key quantum technology, according to the report by the Australian Strategic Policy Institute (ASPI)".

China is doing good work in research, they have better than western manufacturing expertise, skills, and capacities, and they have been producing top of the line products of their own in several areas.

For an example in a more visible consumer space where they dominate, take DJI drones, as an example. Also gimbals of various kinds. And companies like Insta360 and DJI are also starting to overtake GoPro in action cameras.
Many places have abundant abandoned buildings and a strong counter culture. Very few have a Berlin Wall, I'll grant you, but the spark to set this off could come from elsewhere.
"Roots of UI/UX Design" – New Book in Town for Web Designers
It works if you stay in Demark you whole career and retire there (and the government doesn't end up changing and removing the benefits you earned over a life time).
Our team has been up to something exciting, and it's time to show it off. We're very happy to share our newest book with you: "Roots of UI/UX Design: Learn to Develop Intuitive Web Experiences."
> If you or your spouse is a doctor or nurse, there's apparently nowhere in the EU who won't instantly give you a visa.

Of course NOT in Germany. They hate foreign specialists taking the job of germans. Friend of mine was a eye-doctor (ophthalmologist) from El Salvador, and only was allowed to work for EUR 500 a month, 5:30 am, caring for elderly people. They won't accept your foreign certificates. In El Salvador he makes 4.000 a month.
They give you a visa, but you cannot work as doctor.
For heap-allocated objects, there is a way to do borrow checks at runtime if you want (there's something called constraint references, explained in https://verdagon.dev/blog/raii-next-steps.)

For structs that I do not want to heap-allocate, they're usually POD types and in arrays (which you can bound check), so there's not much to think about borrowing. The more concerning issue I usually have is about about initializing the values correctly (which usually Rust doesn't help, when reasoning about performance-sensitive code).
The character/modes of rejection have gone from maybe mortifying titters/giggles amongst the friends of the person being hit on to the potential of literally having one's shame splayed across the internet for all to see. Perhaps with embellishments about how creepy or clueless they were, etc.

There are a ton more unwritten/unspoken rules about this now, it seems, than even a decade or two ago. Rules about when/where it's okay to hit on someone, what is permissible to say, etc. And these rules seem to change from person to person: so one never knows what they actually are.
I think this attitude goes way beyond just crypto/web3. It seems like corporate greed and environmental destruction is a-ok as long as the company tweets in support of woke stuff.
Ask HN: Would you pay to delete all your unused/forgotten accounts from the web?
SEEKING WORK | REMOTE | DESIGN Location: Joao Pessoa, Brazil
https://natdesign.me/ hello@natdesign.me

--

Hi, I'm Nat. I've previously worked as a marketing and visual designer for Fast and several other startups in Silicon Valley. Recently, I decided to establish an affordable design subscription service for those who need professional design work but aren't yet ready to hire a full-time designer. With a monthly subscription, I commit to focusing on creating stunning designs that elevate your product. No fuss, just great design.
I liked the JRE episode with Jimmy Corsetti. He thinks he found the traces of Atlantis in west Africa.

It was an entertaining episode to listen to, not being a scholar, it's hard to know if he's right or not.

Here's a clip: https://www.youtube.com/watch?v=o_R1zoY9kWs
That XKCD joke was all over the Internet in 2006. Now get off my lawn.
Initially, the US government. Eventually, probably rapidly, enrichment will be done off-Earth from ore mined off-Earth.
I often replace searching for something on google with ChatGPT these days. I expect the way we interact with information to be replaced completely in the future. Why would I skim through all those clickbaits and ads instead of getting a tailored result of exactly the information I was looking for
> Regarding security, malicious actor could show you a different source code from what he distributes in a binary form.

That's why hashes are published by distributors and checked by package managers, right?
This is why you should always have more than 1 bank account and credit card.
in a multipolar world though, a country being able to do that weakens the currency severely in international markets. countries may like keeping their populace under their thumbs, but they may have overriding concerns - at least that's my hope.
This seems like a "well, duh" type of result.

But there's other factors at play. There's an evolution of LLMs happening right now, which is very similar to what happened with stable diffusion.

Specifically, there are publicly available LLM weights available. Many disparate, independent individuals and organizations are fine-tuning these models, creating LoRAs, and new foundational models. These weights are being merged, and further fine-tuned.

This creates a system where humans are "evolving" the LLMs such that they change and adapt to requirements. And, of course, we select only for the best performing LLMs.

Due to this, GPT-3 has been surpassed by open models, and we have specialist models that are better than GPT-4 in their domains. It seems to be only a matter of time that open LLMs are better than GPT-4.

So, on their own, LLMs may not be able to generalize beyond their training set. But from a higher level, there is an ecosystem of evolving LLMs which do generalize (and sometimes specialize). As far as I'm aware, the fine tuning/creating LoRAs on new datasets that humans are doing could also be done in an automated fashion.

So you'd need a system which accepts new external data/inputs, fine tunes on those, and some evaluation metric to choose the best LLMs. With such a system, it seems possible that LLMs could automatically learn and adapt to new information, much how humans do.
It seems you missunderstood me, I did not say they were for hire. But they were after money. And they got money by convincing students they can get internationaly accepted and sought for MBAs, while they were worthless in reality. And wikipedia was promoting that fraudulent school for 4 years, repeatedly deleting sources exposing the scam.
That was organized. And maybe they found new projects to work on after the old got exposed too much, or indeed freelance, sell out their wiki skills to other malicious actors. At the moment it is all not really clear to me.