skysight-inc/HackerNews huggingface dataset:
My favourite: https://github.com/anisotropi4/kingfisher/blob/main/image/R/...

What's perhaps odd (if it's based on sales as some have suggested) is that Shanklin also doesn't show any traffic beyond the Island Line despite it being possible to buy a ticket from the mainland which includes the ferry crossing.
It looks like a deliberate decision to not explain the term until the very end ... a tongue-in-cheek demonstration of the problem being described. They eventually give the expansion towards the very end, but that too is obfuscated by putting it as an HTML abbr tag.
Obligatory comic: https://pbs.twimg.com/media/DuJMkjIXcAcRru9?format=jpg
Yep, not only forbidden but a criminal offence in all Western countries.
> nobody cares.

I don't agree.

Most people don't actually know any better, to be able to care. That includes not just normal users, but programmers, web admins, team leaders and managers too.

They never had to unload a TSR because there wasn't enough conventional DOS memory available. They never used Win3.10, where even the button light/shadow colors could be changed, yet fit into 1 MB RAM and 20 MB disk. They never browsed via 3KB/s dialup. Many never saw a website 1.0 without JS. Of them 99.999% never saw a 64K intro/demo. They don't know it's possible.

> If people did care, you'd have someone writing a highly optimized chat/voip app from the ground up

That does happen, rarely, and even then, it doesn't change the situation.

1) Very very few people are capable of writing apps. Out of them, very very few are capable of writing apps, optimized or not, that don't import the entire internet as a dependency. That's because that's how they were educated: "don't waste time rewriting code", "you'll repeat the mistakes", and other BS arguments that lead to nodejs and other monstrosities.

2) Those very few people are the same ones that actually wrote Discord, Slack, Teams. Most of them want to finish quickly and jump ASAP to the next big fancy project that caught their interest. So they import the entire internet as a dependency instead of writing again a 2-line function. These are the people that didn't care.

You won't see anymore people like Christian Ghisler who write and maintain some piece of software for their entire life.

3) Someone recently wrote a Windows terminal app faster, smaller, better than the official, just as a tech demo. Most people (99%) won't find out about it. I'm sure there are Teams alternatives. Nobody finds out about them because Google and M$ control what everyone sees.
Impressive how few code changes they managed to convert an existing LRU library into SIEVE.

https://github.com/cacheMon/lru-rs/commit/1c45ef7fe85f4a4395...
Someone adventurous did Wick-Bodmin Parkway... I hope he's arrived by now.
Does the fact that docker runs as a root have something to do with it?
a docker image can’t be relied on to not contain malware and a docker container can’t be relied on to contain malware.
Great number of Linux hosts run in virtual machines, reducing the number of different devices drivers for that purpose.

For running on bare iron.. I suppose there's no short-term solution for that.
Perusing the author's about page [1], I see that after making malbolge-lisp in 2020-2021, in 2022 she made blc-mb [2], a Binary Lambda Calculus evaluation engine written in Malbolge. So now the simpler implementation path is available too.
But the BLC engine is still a whopping 46MB! This is what the first 320 bytes of its Malbolge code looks like:

bCBA@?>=<;:9876543210/.-,I*)(E~%$#"RQ}={
zyxwvutsrD0|nQl,+*)(f%dF"a3_^]\[ZYXWVUTS
RQJmNMLKJIHGFEDCBA@?>=<;:9876543210/.-,+
*)('&%$#dc~}|_^yrwZutsrqpinPlOjihgf_dcEa
D_^]\UZYX:V9TSRQPONGLK.IHGF?DCB$@#>=<;49
87w/v3210/.-,+$k('&%|#"!~w`{zyxwputslUpo
nmlkjiKgf_Hcba`_^]\[ZYXWP9TSRQPONMFKJCHA
*EDCBA@?>=<|:98y6543210).-,%*#j'&%$#"!~}

I'd love to hear about the tools used to construct this monster of code. My hat off to this programming wizard!
Btw, it's shocking to see how much better bzip3 by this same author [3] compresses than bzip2:

46M blc.mb
1.6M blc.mb.bz2
1004K blc.mb.bz3

[1] https://palaiologos.rocks/about/

[2] https://github.com/kspalaiologos/blc-mb

[3] https://news.ycombinator.com/item?id=31324439
> SIEVE isn't just playing the part of a cache eviction algorithm; it's stepping up as a cache design superstar. Think of it like giving a fresh spin to classics. We've plugged SIEVE into LeCaR, TwoQ, ARC, and S3-FIFO, swapping out their LRU or FIFO queue for a SIEVE one.

> Swapping LRU with SIEVE in these algorithms isn't just a minor tweak; it's more like giving them a turbo boost. Take ARC-SIEVE, for instance – it's turning heads with its slick efficiency, especially noticeable across different cache sizes. We didn't stop there. We pushed SIEVE a bit further by letting it peek into the future – well, sort of. We tested how well it could guess the next request. It turns out, with this extra bit of foresight, SIEVE is nailing it, outperforming the rest in almost all scenarios.

I find that style of language off-putting and immature.
I read it superficially. And it's okayish. Again, nothing against the author.
Putting on my tinfoil hat, I think there’s also an argument to be made that the NSA might want to slow down adoption of post-quantum algorithms, which their stance against hybrids definitely accomplishes. If there’s a single organization that could be 10-20 years ahead of where people think they are on something like a useful quantum computer, it’s the NSA (powered by the US’s absurd defense budget). If they can slow down the adoption of post-quantum algorithms, they can maintain their potential head start for longer and be able to break current cryptosystems and extract actually valuable information.

Outside of the NSA (and its affiliates), most of the cryptographic community seems to have come together in support of hybrids, which would greatly accelerate the adoption of some level of post-quantum defense. With even the most “liberal” cryptographers thinking that more careful cryptanalysis of post-quantum algorithms is needed before widespread adoption as the sole line of cryptographic defense, if the NSA manages to convince sufficient people that hybrids aren’t viable enough for production (and thus stick with classical algorithms) they may be able to maintain the ability to break sensitive communications for longer when and if their quantum computer efforts have a breakthrough.
And weirdos like me who commute out from London into Cambridge, via London Liverpool Street mostly.
And you can spot that when you use them? How, exactly?

I can understand the phonegap/cordova confusion, as they will only ever be styled imitations of the real components so may not look or behave exactly the same - but react native is using native components, so what difference is there to "spot"?
Not even Linux itself is kernel module compatible from version to version, so it would be exceedingly difficult to try to be compatible with it.
More like memory safer. A kernel necessarily has a lot of unsafe parts. See: https://github.com/search?q=repo%3Allenotre%2Fmaestro+unsafe...

Rust is not a magic bullet, it just reduces the attack surface by isolating the unsafe parts. Another way to reduce the attack surface would be to use a microkernel architecture, it has a cost though.
This is a question of Copyright law [1], which also differs depending the jurisdiction. > from-scratch rewrite
rewriting is literally a derivative work. With 'from-scratch' you probably mean some form of 'clean-room implementation', which is specifically required to circumvent copyright protection. Performing such an implementation is quite laborious and needs to be properly documented. That an opensource project with more than 400 contributors can reasonably attest this is somewhat questionable.

1: https://www.copyright.gov/title17/92chap1.html#101
This was a wild time to be working in IT, not for what got shipped (spoiler, none of it did) but for the outlandish claims and bullshit that got tossed around trying to get other companies to stop investing in existing tech. Taligent. pink blah blah. Like they weaponised the Osborne effect against competitors.
A neighbor got out of Yugoslavia when things fell apart. Formerly cordial neighbors burned down his family's house (near Sarajevo). He does remember favorably the Tito regime's success in keeping the peace.
> Imagine if containers were actually vm-level safe? The performance and operational simplicity of a container with the security of a VM.

As far as I know, the order of magnitudes of container security flaws from memory safety is the same as security flaws coming from namespace logic issues, and you'll have to top that with hardware issues. I'm sorry but rust or not, there will never be a world where you can 100% trust running a malware.

> Fuschia [...] is unlikely to give us the memory safety that a Rust kernel would

Well being micro kernel make it easier to migrate bits by bits, and not care about ABI
I think for anything more complicated than (maybe) sorting, appreciating the subtleties in these algorithms goes a long way in helping you decide when to use them vs not.
It's astounding to me that people still don't seem to understand the difference between chopping down a tree and clear cutting a forest. Your callous disrespect for the people who made these ai systems possible proves my point, so thanks I guess.
Whether it is a grid or a selectively placed point cloud was not the point. Either way you end up with a mesh you can use for a relatively simple warp.

Granted, using it as input for a model might be more accurate, but also more complex. The simple warp might be enough to get within reasonable mapping tolerances though, while simultaneously revealing which areas are in most need of update.
Software development is a process, the output is either art or not. You could say the same about painting, but painting a house and painting a painting aren't the same amount of art.
I like Rust and work in it fulltime, and like its memory-safety aspects but I think it's a bit of a stretch to be able to claim memory safety guarantees of any kind when we're talking about low-level code like a kernel.

Because in reality, the kernel will have to do all sorts of "unsafe" things even just to provide for basic memory management services for itself and applications, or for interacting with hardware.

You can confine these bits to verified and well-tested parts of the code, but they're still there. And because we're human beings, they will inevitably have bugs that get exploited.

TLDR being written in Rust is an improvement but no guarantee of lack of memory safety issues. It's all how you hold the tool.
I love the books as well (especially in my very nice Folio Society edition).

As for the impossible naval jargon, I found it amusing to see the movie in (Danish) cinema, where the incomprehensible naval terminology was replaced in the subtitles with… incomprehensible Danish naval terminology.
Easy reading (promises bullet points you can skim) plus fomo (you're missing this knowledge) plus no true Scotsman (you don't know this so you're not a real dev)

Or, to summarise, it's clickbait
That must be a nice quiet commute.
Notion served me well.
Exactly the discussions I have in my firm as the financially responsible. We spend loads on run, change, manage the profolio agile (not even snarking on that, I’m pretty amazed at the delivery and how much of the delivery is adequately estimated well in advance). However… I as a financial have no clue how to do run/change and TCO and ABC consistently. We do ABC as the finance organization, but it lacks the TCO and run/change insights needed to help steer IT delivery. And obviously the managers whom IT spend mostly benefits are reluctant to show the benefits directly since hey, finance is all about cutting staff right? Time tracking is an organizational no go both culturally and historically. So how can we help bring those perspectives better into view but with a light hand? Any ideas much obliged.
A ream of printer paper and a pencil is less than $10.
For a semi-related case study of entrepreneurial tool-building in science, I also liked this: http://milan.cvitkovic.net/writing/neuropixels/
Yes, but even rootless containers rely on user namespaces, which are a recurring source of privilege escalation vulnerabilities in Linux.
Honestly Royal Road is a treasure. It's the only site where I actively click on t he ads because the ads are all for new stories and there's a decent chance I'll like one.
I don't think anyone is suggesting that every programmer implements their own list every time they use a list. But it's useful to have an understanding of how common data structures work, how basic algorithms operate, and what kind of things are out there.

Writing software is much easier when you know that things like B-Trees exist or how breadth-first search works. How do you know where to find things like this in your library if you don't even know they exist?
I think one can use random eviction to avoid any kind of pattern changing the average performance.
SEEKING WORK | Europe | Remote (CEST/ET/PT Timezones)

Django expert and DevOps with 13 years of experience looking for a full time / part time work.

Tech:

Django, Django Rest Framework, FastAPI
React, Next.js, React Native, GraphQL
Kubernetes, Terraform, AWS, GC, Azure
Airflow, Flink / PyFlink

Email: michal@michallech.info

Ping me with what you need help with and let's chat!
Cool. I currently deliver the unit with copyright-free music and it can stream web radio as well.
The problem is that constrained devices with planned lifetimes of 20-30 years being specified today already are getting requests for inclusion, usage of PQC as well as classical algorithms.

Pre-shared only works for deployments with low-ish number of devices. We are talking about 1000+ devices.
Care to elaborate on this?

I clearly understand nothing of this, but it always felt confused about it. Why won't Linux aim for ABI stability? Wouldn't that be a win for everyone involved?
Update on the current state of Hachyderm's federation with Threads (Mastodon)
Though someone who lived in London a long time ago could make this mistake, as until 1994 the Waterloo and City line was owned and run by British Rail.

https://en.wikipedia.org/wiki/Waterloo_%26_City_line

The thick line is Waterloo to Clapham Junction.
> Consider that right now a docker container can't be relied upon to contain arbitrary malware, exactly because the Linux kernel has so many security issues and they're exposed to containers

If you don't run docker as root, it's fairly ok for normal software. Kernel memory safety is not the main issue with container escapes. Even with memory safety, you can have logical bugs that result in privilege escalation scenarios. Is docker itself in Rust?

Memory safety is not a magic bullet, the Linux kernel isn't exactly trivial to exploit either these days, although still not as hardened as windows (if you don't consider stuff like win32k.sys font parsing kernel space since NT is hybrid after all) in my humble opinion.

> Linux had been built with safety in mind security would be a lot simpler

I think it was, given the resources available in 1993. But if Trovalds caved in and allowed a mini-kernel or NT like hybrid design instead if hard-core monolithic unix, it would have been a game changer. In 1995, Ada was well accepted mainstream, it was memory safe and even Rust devs learned a lot from it. It just wasn't fun to use for the devs (on purpose, so devs were forced to do tedious stuff to prevent even non-memory bugs). But since it is developed by volunteers, they used what attracts the most volunteers.

The main benefit of Rust is not it's safety but its popularity. Ada has been running on missiles, missile defense, subways, aircraft, etc... for a long time and it even has a formally verified subset (SPARK).

In my opinion, even today Ada is a better suit technically for the kernel than Rust because it is time tested and version stable and it would open up the possibility easily formal-verifying parts of the kernel.

Given how widely used Linux is, it would require a massive backing fund to pay devs to write something not so fun like Ada though.
Evri chatbot is the worst, and Evri is ebay's default courier in the UK.

So when your parcel doesn't turn up and you use the chatbot, all you get is the same information you've been told by ebay already.

Evri use contract couriers and they get paid per parcel. They will sometimes choose to "lose" your parcel if there is no money in delivering it.

Source: I moved to a new build and our area was assigned to the wrong catchment and our new local guy told me all that when he took over when it was moved.
For beginners, I can recommend Grokking Algorithms by Bhargava. Small book with lots of illustrations, which is good for building up an intuition of what's going on.
The comment still exists but it’s been hidden. I believe as standard you can expand the comment (likely at the bottom) to view it but might need to change some settings to see these comments. Logging in probably refreshed the view and updated the comment to its new hidden status (or your user specific settings kicked in and stopped it displaying)

Whether it’s HN or not, no idea, but it looks to be flagged by other users who can downvote to me though.

edit: someone beat me to it! I should have logged in to refresh the view! :D
Google Settles $5B Lawsuit for Tracking Users in 'Incognito' Mode
The solution is better anti-trust, not giving Apple a real monopoly because of Google's potential monopoly. Good anti-trust will handle both.
What do you mean a risc-v kernel? One written in RISC v assembly? Because that would be terrible.

Risc-v is the instruction set architecture, rust is a programming language. You can port languages to target ISAs. Linux can already run in riscv. The ISA of the hardware and the language the software it runs are completely different issues.
Duff-man says Buy Duff !
While I agree, do note that a significant portion of a kernel is internal logic that can be made much safer.
> middle class white women

Sachachua enters this category. I am sure she would be glad to read your book.

pd: sacha if you read this, no offense, just joking, hahahaha
These "constrained devices" come up so often in discussions about costs of cryptography, yet people rarely tell what exactly they are talking about. But given that cryptography is usually not very resource intensive to begin with (people often have incredibly wrong ideas about the actual computational costs of cryptography), and we increasingly have more powerful devices even in embedded settings, I doubt this is an actual problem.
Is this discussion about bdsutils?
Why do you dismiss the whole legal discussion as 'unsubstantiated remarks'? It is certainly a valid issue for a non-GPL rewrite of a GPL software.
There’s still a large “I like the feel of a real book even if it’s a paperback” contingent. But I assume that is much less true of relatively younger people. (I’ve gotten rid of a lot of my books that are in the public domain and would largely clear out most of my paperbacks if I could magically get them in digital format.
Disney apparently seems to be pretty "woke" nowadays and they're still around
These make GB look like the blood vessels in an eye scan, or the surface of the brain.

Who looked for their childhood stations? Basingstoke, and Wood Street are shown, either end of the journey to visit my Nan. It feels like I could retrace the trip blindfolded. (Oldish person, please forgive the reminiscing)
And here's a video of them milking the snakes:

https://www.youtube.com/watch?v=8JDwMDlcBhE

It's nuts. Hats off to Zac the snake handler.

Stats from the video: 1 vial of antivenom requires 20 milkings. Worst case, a treatment requires 10 vials. This is part of the reason antivenom is expensive. Seeing this process, one can appreciate the attraction of a manufactured pill.
Lots of places will eventually get you free LSD therapy, same as any other kind of free healthcare.
Show HN: Long context window for LLMs
I think the source data is here, under an Open Government licence, but annoyingly it's necessary to register with a name and address etc. to download it: https://raildata.org.uk/dataProduct/P-a9faf6fd-b31f-491c-935...

Though someone is redistributing it (which is allowed) here: https://www.railforums.co.uk/threads/orr-origin-destination-...

I found an alternative (and interactive) viewer here: https://public.tableau.com/app/profile/richard.rowson/viz/Ra...
Yeah, I'm not a fan of the rust ecosystem trying to move everything from FSF-style free/libre licenses to permissive licenses.
I have used in this app: https://mhealth.jmir.org/2020/1/e13756
it's OK for relative orientation, but not for absolute values
> the order of magnitudes of container security flaws from memory safety is the same as security flaws coming from namespace logic issues,

Memory safety issues are very common in the kernel, namespace logic issues are not.
For what it’s worth, I like to think of myself as a fairly handy person and I like to do as much DIY as possible, but replacing the eroded thread in a mini blind I had on a double glazed window was insanely time consuming, aggravating, and ended up not working exactly as I had hoped, the blinds are slightly too difficult and obtuse to open/close or flip.
For people in this thread, I strongly recommend Rob Fitzpatrick's book on how to write a book as a business, "Write Useful Books: A modern approach to designing and refining recommendable nonfiction":

https://www.amazon.com/Write-Useful-Books-recommendable-nonf...

Even though I'm not an author I found the advice very useful, it can trivially be applied to building and marketing any product.
I made a Mandelbrot renderer for something like this 30 years ago. Never realized it would look so good if I plugged it in my TV.
You'd think it was pretty cool, sure, we all would... but imagine you lose your job, the job market sucks, etc. you're on your 8th month of unemployment and having a hard time making mortgage payments and you see a company like Sony shipping something based on your own open source stuff... but without contributing back, without attribution, and without compensation?

Real world scenarios like this is what led people to embrace the GPL.

When times are good, corporate use of open source trickles down to the community in the form of patronage and employment. It is not always the case that this happens during "bad times."
Instead of the warping effect, I'd like to see the game extract the pathways and overlay them with one another. I think that could be the USP for a game like this, that is only based on simple geometry, using an isometric camera. The green pill could see their floor tiles outlined/highlighted in green, and the red pill could see theirs in red. Once they're close enough again, the geometry and colors would merge again.
> . Kernel memory safety is not the main issue with container escapes.

I disagree, I think it is the primary issue. Logical bugs are far less common.

> the Linux kernel isn't exactly trivial to exploit either these days

It's not that hard, though of course exploitation hasn't been trivial since the 90s. We did it at least a few times at my company: https://web.archive.org/web/20221130205026/graplsecurity.com...

Chompie certainly worked hard (and is one of if not the most talented exploit devs I've met), but we're talking about a single exploit developer developing highly reliable exploits in a matter of weeks.
Step by step guide to develop a Fluent API from scratch in .NET C# using the Builder Design Pattern.