skysight-inc/HackerNews huggingface dataset:
> "This entirely separate attack exists therefor completely removing an entire attack primitive haves no value"

It has value, but it's also true that trusting cloud providers serveless infrastructure introduces additional sets of vulnerabilities due to various reasons.

eg: https://sysdig.com/blog/exploit-mitigate-aws-lambdas-mitre/

Reading your comments, I get the impression that you are used to dealing with clients whose infrastructure management skills are lacking, and they are making a mess of things.

While serverless infrastructures certainly eliminate a range of vulnerability classes, it is adoption is unlikely to be sufficient to secure platforms that are inadequate for the threats they face.

At the end of the day, someone has to put in the work to ensure that things are patched, safe, and secure, whether the computing model is serverless or not.
The article isn't talking about GitHub though. It's talking about people who self host packages on their own domain.
there is not much wrong with unchecked growth. Apple has added a ton of value to society
Non-paywall story: https://www.bbc.com/news/world-europe-67387827
> > I feel that Apple protects us from bad programmers for the most part

Oh poor thing. They protect themselves and software houses from torrent-esque and crack-esque like solutions which can be easily found for everything that runs on Windows, including Office, not to mention the Windows OS itself and everything Android.

That's also the reason why Apple dominates the US market whereas Android has the majority of devices elsewhere in the world.

Americans will fight between each other with hordes of lawyers at the cost of thousands of dollars for the stupidest things, but won't spend 30 seconds torrenting in order fuck Hollywood,Amazon, Netflix and Microsoft in the ass.

When you ask the reason why, their reply is : 'convenience'

When you ask why they fight for the stupidest things against fellow citizens using hordes of lawyers at the cost of thousands of dollars the reply is: 'To prove a point'

Bizzarre
Yes. It’s like a Googled version of Apple’s Private Relay.
If my debit account has money in it. I own money.

If my credit account is negative I owe money.

If my credit account is at zero, I neither own money nor owe money.

If my debit account is at zero, I neither own money nor owe money.

Out of those options, owning money is still more triumph than credit.

I don't need a credit card. It's a false vision that I'm missing out on anything. My expenditure is mine with a debit card and I owe no one anything to purchase the item to which I can afford.

Credit cards are only fine if you can pay off the full amount at each month. But for any items that you have not paid off in full. You owe, your in debt to whoever until you pay off the full amount. If your lose your job and you have no buffer, your screwed. They don't cuddle up and waive your bills because you lost your job. They become vicious demons demanding more because you can't pay off the debt you owe.

> For 99% of adults (and a lot of children, to be honest) they're capable of doing so and credit cards are a way to save money and have better control of your finances (which itself helps you save and make more money).

I'm sorry but that's total bullshit; provide source please if your going to make such claims. Because all I know is that we live in a world full of debt. People are struggling to pay ends meet including their credit card bills.
DO YOU HAVE SOMETHING INTERESTING TO WORK ON?

OK, I guess you grab your attention.

So, I am a backend developer who has worked on different languages and technologies and made web apps, automation tools, ETLs, data pipelines, etc.

I am bored and willing to work on something interesting and challenging and could compromise on cost or even work for free if it is super interesting for me. I do not claim to be a master of all but can get shit done. Below are my credentials:

Resume: http://adnansiddiqi.me/Resume2021.pdf

Blog: https://blog.adnansiddiqi.me

Github: https://github.com/kadnan

Keywords: Automation, Scraping, Bots, Discord,Algo trading, backend, ETL,LLM, OpenAI, Python, Go, Blockchain, APIs, Chrome Extensions
Isn't that incompatible with "submerge during storm"?
Building C# is quite literally 'dotnet build -c release'.
> intact enough that people will look at it and play with copper spirals

We've mined out all the easy copper, too.
There's earthly.dev but like previous commenters, I went with dagger because i prefer its Apache 2.0 license over earthly's BSL.
I’ve been addicted to using Linux for nearly a decade, so I relate to this. I’ve been using Nix off-and-on for 4-ish years, but have really invested/contributed to it this year.

Making Nix (particularly with flakes) my primary dependency this year has shifted my focus away from the operating system/Linux distribution I’m running on to making a totally portable env. I.E. I can be pretty comfortable on any OS, assuming I can use Nix.

It’s been really fun and useful for work and my homelabbing.

Here’s my Nix flakes repo for anyone curious: https://github.com/heywoodlh/flakes
> The same way they do for people who aren’t from the US?
Some combination of name, address, birthdate, etc.

Plenty of countries have SSN-like numbers: https://en.wikipedia.org/wiki/National_identification_number

It's really not that special.

> But the problem isn’t using the SSN as a semi-unique ID. It’s using it for that and also assuming it’s secret. SSN shouldn’t be any more secret than name or address (and shouldn’t be used to unlock or access accounts).

Of course. Shouldn't it be trivial to sue any institution that uses SSN as a way to confirm your identity?
Hope you never need opiates for an injury and have a family history of substance abuse, it's more common than you might think
Ask HN: How do you discover what you're passionate about?
I feel like I’m stuck in a rut and I have nothing that I’m passionate about.

I want to find a job where I feel fulfilled or at least a hobby that I get actively excited to do. Maybe start my own company based on the above.

But I have no idea how to find that “thing”.

When I was a teenager, I had a ton of excitement about specific things and the energy to go learn every little thing about them, but now in my 30s, even if I know I’m interested in a subject, I barely pursue the topic.

It’s like there’s a wall of apathy between the thing I might be interested in and the act of following it.

I’m not depressed.

I have an active social and dating life, I eat well, sleep well, have a good relationship with my family.

But the spark and passion that I felt maybe 10 years ago is gone.

How do I rediscover what I enjoy and do something with that?
In regards to taxation and regulation of services sold into the EU common market Ireland is not fully sovereign. They have their act together, this is the legal process playing out.
Yes. The first code example in the blog post, referred to as "Problem Case #3", shows a case that intuitively should work, is rejected currently, and would be accepted by Polonius.
DO YOU HAVE SOMETHING INTERESTING TO WORK ON?

OK, I guess you grab your attention.

So, I am a backend developer who has worked on different languages and technologies and made web apps, automation tools, ETLs, data pipelines, etc.

I am bored and willing to work on something interesting and challenging and could compromise on cost or even work for free if it is super interesting for me. I do not claim to be a master of all but can get shit done. Below are my credentials:

Resume: http://adnansiddiqi.me/Resume2021.pdf

Blog: https://blog.adnansiddiqi.me

Github: https://github.com/kadnan

Keywords: Automation, Scraping, Bots, Discord,Algo trading, backend, ETL,LLM, OpenAI, Python, Go, Blockchain, APIs
Yes, but it’s end-to-end-encrypted.

See https://github.com/GoogleChrome/ip-protection/issues/10 for example.

Of course, Google can conceivably backdoor Chrome, and then the exfiltration of data wouldn’t be obvious from the client-side traffic.
which is why Janet Yellen was lobbying to tax global companies worldwide so they could not find tax shelters
How was React designed to "avoid the build step" or "make View Source useful"?
Republicans in the US are not on bored. They are threatening retaliation if EU countries move forward with it.

https://www.wsj.com/articles/house-lawmakers-europe-global-c...
You should have replied that their sig was unnecessarily huge and was clogging the servers more than you did.

Most of what I know about online knife-fight arguing came from Usenet.
> A/UX, Apple's own Unix with a bolted-on Mac compatibility layer

I used a Mac running A/UX circa 1990-91. It worked rather well for the period. I was really surprised when Apple dropped it because it solved a lot of what I saw as problems in MacOS.

The article also mentions Apple talk. There was some free software called UAB, Unix-to-AppleTalk Bridge around that same timeframe.
From the third paragraph of the article:

> It's designed to run Chrome browser connections through two proxies, one operated by Google and one operated by a third-party (eg, Cloudflare), so that the true public IP address of the user is obscured, hopefully thwarting attempts to track them around the web using that address.
Particularly peat, which notably forms in peat bogs at a rate of 1mm per year, on the surface. If society collapses then a millennium later there'll be a metre-thick new layer of the stuff in some areas.
Is it really four? Could have sworn it was five, since you got a "middle" to help managing the group or subgroup.
At least I immediately bunch things in groups of five, so I always thought it was the correct one.
Well that's another thing, I don't see why would you need to get rid of SSNs. You just need to add another layer that will confirm that you're the "owner" of your SSN. Seems pretty easy to do?
I upvoted you because you are right. I will never understand the excitement of the Hacker News community to pay a 50% penalty to the worst type of people on earth, those that do not produce.
I think of OCaml like a "kitchen sink" language, much like Scala. The reference ML implementations like SML and Jersey seem to be much more limited in scope, and are nice for learning / getting a feel for the original intentions behind the language family.
The primary stated goal is “substantially widen the pool of people who can work on web software codebases.” That’s very different from typical advice for programmers.

Customization isn’t required as long as defaults work. As such the efficiency gains from CSS etc take a back seat to simplicity.
The mine Bagger 288 services goes sixteen hundred feet deep.

The Big Hole is absolutely miniscule in comparison - 42 acres - and mining for diamonds is a lot more lucrative by volume.

You're not digging out https://upload.wikimedia.org/wikipedia/commons/e/e8/Bannerak... by hand.
Transformers tend to be trained in parallel. BERT = 512 tokens per context, in parallel. GPT too is trained while feeding in multiple words in parallel. This enables us to build larger models. Older models, such as RNNs couldn't be trained this way, limiting their power/quality.
I love the ideas here, but honestly the examples are a bit weak here.

> Where possible, default to defining style and behaviour with inline HTML attributes

but their example wouldn't work.

<div class="bg-green" onlick="this.classList.add('green')">

should probably be

<div onclick="this.classList.add('bg-green')">

which I think makes it a little more clear how weird this could get if you wanted to add more styles. You just keep growing the params passed to the ClassList add method, in a string. I would personally find

<button></button>
button:active { background: green; }

to be much more readable, but the author seems to imply this is complicated due to their approach of "Locality of Behaviour".

--

> Where libraries are necessary, use libraries that leverage html attributes over libraries built around javascript or custom syntax

I totally agree! But why is your example of a library not built around javascript or a custom syntax feature:

<input type="text" _="on input put me into #output">
<div id="output"></div>

That "on input put me into #output" I think is more jarring that the library shown as the bad example. Even better, this could just be some JS, without a framework at all.

--

> Prefer "naked" HTML to obfuscation layers that compile down to HTML

Their example is to not use Rails ERB tag helpers, in your templates. I don't think this is that big of an issue, these helpers can actually handle a lot of things that will look messy if you use the minimal amount of templating to write them. The example leaves off unique dom ids, turbo tags (very HTML/no JS focused!) and iteration.
The CPUs are good at serial code and GPUs are good at parallel code is kind of true but something of an approximation. Assume equivalent power budget in the roughly hundreds of watts range, then:

A CPU has ~100 "cores" each running one (and-a-hyperthread). independent things, and it hides memory latency by branch prediction and pipelining.

A GPU has ~100 "compute units", each running ~80 independent things interleaved, and it hides memory latency by executing the next instruction from one of the other 80 things.

Terminology is a bit of a mess, and the CPU probably has a 256bit wide vector unit while the GPU probably has a 2048bit wide vector unit, but from a short distance the two architectures look rather similar.
I thought the point of the article was more to avoid react if all you want to do is change background color. Thus more: don't use react in the first place, rather than: here is how to use less react.
As I noted in the other post, the Big Hole in South Africa was dug to a depth of 240 meters by hand.

Coal mines of that depth nothing special, even with 19th Century steam technology.

https://en.wikipedia.org/wiki/History_of_coal_mining

"By 1856, the average depth in the Borinage was 361 meters (1,184 ft), and in 1866, 437 meters (1,434 ft) and some pits had reached down 700 to 900 meters (2,300 to 3,000 ft); one was 1,065 meters (3,494 ft) deep, probably the deepest coal mine in Europe at this time."
I like how he concludes "The practices and principles described on this site are still considered niche in the industry as a whole". Like he's the only one out there who knows about the details/summary tags, or who uses static HTML documents instead of React.
Click-to-copy CSS Button Examples
Only American ones right? I can’t imagine Germany would be happy with America trying to tax SAP on its world wide income.
Can the people that want this HTML-first world style it to look the ways they want themselves?

My experience has been that proponents of HTMX and the like skew heavily backend and never feel comfortable with CSS.

Why listen to UX thoughts from a population who are scared of UX?
> When faced with multiple tasks, a CPU allocates its resources to address each task one after the other

Ha! I wish CPUs were still that simple.

Granted, it is legitimate for the article to focus on the programming model. But "CPUs execute instructions sequentially" is basically wrong if you talk about performance. (There are pipelines executing instructions in parallel, there is SIMD, and multiple cores can work on the same problem.)
The large government debt is a cause and effect of the dollar being the reserve currency. Other countries want American debt to peg their own currencies to.
It's not really a pyramid, just an ancient volcanic core where people deposited stones on top of it for long periods of time. There is no indication of architecture, engineering or organized work crews being involved in the construction. It may be the world's largest cairn/tumulus but definitely not the oldest pyramid.
There are lots of great companies out there running modern Ruby stacks! Throw your name in the hat, see if you get any hits!
> It's just really kind of ridiculous that the same basic problem gets re-implemented literally thousands and thousands of times across different platforms and use cases

Why not? It's incredibly easy and quick to implement one, why not just make one perfectly fit for your use case every time?

The actual issue here is people insisting on offshoring that implementation to GitHub, so that they deal with a brittle, badly defined interface that is not aligned with their needs, instead of just starting with a simple engine and reimplementing whatever they need. It's actually the opposite problem that standards were meant to solve.
And this is not a total narcissistic opinion at all. Just say all programmers are bad except you.
The $50 is here. I've seen plenty of ATMs that have a choice of bills, including $50's. And even for my small bank that doesn't, it's not terribly hard to occasionally grab several thousand in $50's from a teller and cache them at home. On the spending side, I've yet to have someone balk about them the way they might about a $100.
Use of commas is a mess in other EU countries as well, especially when it comes to numbers. Some countries - including my own - use the , for a . and vice versa in numbers. So 1.000(nl) => 1,000(uk/us etc). This causes a ton of trouble with students who will consume all kinds of information online where the '.' is used as a decimal point and then have to correctly answer questions on their exams where it uses a ',' and a '.' is simply ignored leading to what are in principle correct answers flagged as errors.

This is super annoying because at the same time school mandated computers and calculators will use a confusing mixture of the two depending on whether you are using local software or online software or a physical device intended for another market.
Reminds me of most social media
I love the idea!

In my current company we started with HTML and embedded JavaScript at the bottom and Styles at the top. Everything in one file, very easy to find and understand.

It was "a little bit" slower. Pagespeed Insights didn't like it.

Now we are "modern" with CSS and JS in a build process. And nobody knows which file to look at...

My new Projects will start with HTML first, again.

My credibility: 45 years, commercial web programming >25 years, 3 successful web companies founded as CTO
> necessarily environmentally dirty processes

Increasing false, as demonstrated by groups like this: https://metalysis.com/
It’s disappointing there doesn’t seem to be an easily available blog post or announcement (maybe I just didn’t find it), but the design doc lists a few motivations: https://github.com/ruby/prism/blob/main/docs/design.md

It looks like there was also a podcast interview last year that touches on the origins of the project: https://topenddevs.com/podcasts/ruby-rogues/episodes/the-new...

Reading between the lines it looks to me like this is motivated by ripper (the old parser) not being a great fit for tooling around ruby like IDE LSP integrations and such. Ripper isn’t fault tolerant (if the script has a a syntax error you don’t get a partial tree, just an exception); being implemented in ruby enough itself that it kind of depends on ruby which isn’t always convenient for integration (IDEs like vscode make plugins in JS easy, prism comes with node bindings), and maybe being enough of a crufty old code base that maintaining it and fixing those design issues was deemed impracticable.

Also worth noting if it wasn’t clear I’m pretty sure this parser is not being used or intended to be used for a ruby runtime to actually execute scripts, and that’s not what ripper was for either. This is for tooling that operates on ruby files for other purposes: syntax highlighting, linting, stuff like that.
Europe is fine the way it is. Nations should be sovereign and common economic policy should be policed via fines such as this one. Hopefully this way corpos will learn that tax dodging in Europe is counter productive

Trying to fix this via fiscal union leads to more brexits
Is there a Torrent of that somewhere so we can keep it alive?
Sieve (YC W22), a video/audio AI cloud, is hiring AI/product engineers
That was a full decade ago they went out of business. Perhaps the tech is more viable now for a multitude of reasons.
> Before someone starts about Snow Leopard, the early Snow Leopard releases were also pretty buggy, only near the end of the release cycle did it get good.

This is one of the most misunderstood things about software releases. It's an iron law: major software updates always introduce more bugs than they fix. What you need is a lot of minor bug fix updates between the major updates, and Snow Leopard had about 2 years of bug fixes releases. What people remember fondly is not Mac OS X 10.6.0 but rather 10.6.8 v1.1.

Apple's annual major release schedule is just too rapid to leave any time to fix bugs. They need to go back to 2 years or more between major releases.
The fact that they're being in this mess absolutely means that they did not pay taxes according to the laws. Did you miss what the article says?
"thanks to the good pumping system" (guess what powers that) and "by the late 19th century the seams were becoming exhausted" indicate the practical limitations faced by that.
Tongue-in-cheek is OK after a lick.
I like the article for its contribution of numbers. And I think overall the narrative is valid at this point in time, however I also see three problems with it that show a certain degree of unfounded pessimism. 1: it assumes that the upfront cost of these cars will stay the same, which, of course, is nonsense. There is no reason why economies of scale will not bring down that cost by half or more. 2: It uses the 1.5 people/car statement a bit to "linearly" -- only because right now there is such a ratio doesn't mean that cannot be reduced. In fact, it is not clear whether that number is not merely #car/#employees. Otherwise it would be very inconsistent with Vogt's statement about the lack of need to further optimize. 3: the last few paragraphs seem to be trying to say that these cars are not safe, and the reasons give are a few examples and that they were shut down, but it doesn't compare to the number of accidents caused by humans!
According to [1], the key differentiator is parallax, i.e. the positions of objects change relative to each other, depending on how the viewer is looking at them.

[1] https://www.youtube.com/watch?v=pmqr6ydIzDA
Emphatically no.

Before computers/internet that same categorization was always there. You just didn't know it existed, or couldn't do much about it.

If your shop didn't carry a specific recording version (because it wasn't in their categories), you wouldn't know about it, or would have to spend significant time (and resources) to track it down.

Before you could record music, people categorised everything else. The earliest library classification system we know of comes from Library of Alexandria, 300 years before Common Era.

At every step of the way you were at the whims of the people categorising these things.

Now, as we carry supercomputers in our pockets, people search for and expect computers to immediately retrieve more information than ever before.

So if a person wants a 7", 45 RPM, Single Sided, Card Backed, Audio Postcard recording of Janis Joplin published by Pracownia Pocztówek Dźwiękowych R. Serafin [1], that person now reasonably expects to be able to find this recording.

How do you expect this to work without "categorisation that the bad tech is imposing on us"?

[1] https://www.discogs.com/release/19013644-Janis-Joplin-Aretha...
This is all nice and suckless, until you will have to scale your codebase and/or add some more features (possibly alter someone's code) and deal with exponential complexity of DOM manipulation. React came to solve all this
For me that was an example of lazy cop who don't want to do extra paperwork.

It saved one life, but that person could later return to selling drugs and contribute to thousands OD's and many deaths.
Thank you. Appreciate your answers.
The increase in weight and complexity to the car kind of kills this.