skysight-inc/HackerNews huggingface dataset:
You're not really illustrating your point well with the link. If you look through the examples, they're mostly trivial and there's no clear way to eliminate them. Some reads/writes will interact with hardware and the software concepts of memory safety will never reach there because hardware does not operate at that level.

Check a few of the results. They range from single assembler line (interrupts or special registers), array buffer reads from hardware or special areas, and rare sections that have comments about the purpose of using unsafe in that place.

Those results really aren't "look how much unsafe code there is", but rather "look how few, well isolated sections there are that actually need to be marked unsafe". It's really not "a lot" - 86 cases across memory mapping, allocator, task switching, IO, filesystem and object loader is surprisingly few. (Actually even 86 is overestimated because for example inb is unsafe and blocks using it are unsafe so they're double-counted)
The paper cites some big studies in refs 18-20, IIRC.
The big Australian study (ref 20?) did not found a difference in life expectancy between vegs and meat eaters.

And there is the big EPIC Oxford study with the same result (resp. all cause mortality).

I'm quite sure, that you will find a positive correlation of meat consumption vs life expectancy in societies with general deficient calories intake.
The issue of root vs rootless is unrelated to escaping the container. User namespaces lead to privescs because attackers who can enter a namespace and become the root within that namespace have access to kernel functionality that is far less hardened (because upstream has never considered root->kernel to be a privesc and, of course, most people focus on unprivileged user -> kernel privesc). The daemon running as root doesn't change anything there
I don't think it's about a Darwinism philosophy. I do think there are some players stereotyped out of the NBA or NCAA, based on a recruiter's perception of what said player can do and the opportunities given to said player. It's pretty undeniable what a player with great skill and commitment can do with a good team. So maybe the focus should be on giving better chances.
No, it's because the malware would have direct access to the (privileged) Linux Kernel via system calls.
Unveiling the Art of Bespoke Wallcoverings
> You've just told me you have never done any cryptographic work like SSL

I'm no ekr, but I think I've been around quite a bit actually :)

TLS (and before it SSL) was plagued by what we call "national vanity" algorithms. Suppose you're the Swedish government's cryptography team. Your political bosses just found out that literally everyone uses North American cryptography† for HTTPS and they demand to know why there aren't Swedish or at least European cryptographic algorithms they can use instead. You could explain why this is very stupid and risk getting fired - or you could publish some mediocre own brand technology with your country's name on it and hope the politicians are distracted by the next news cycle and go away.

SM3 is one of those "mediocre own brand technologies". Twenty years ago, SSL was largely a product of engineers. An actual cryptographer would be asked to glance over the final result, but they weren't integral to the design work - after all this is engineering right? The engineers assumed that if we have a dozen choices then we can more easily pivot if things go wrong and that'd be meaningfully safer. AES-128 broken? Just use this Italian algorithm I read about last year instead. So the "vanity" algorithms proliferated. But once we had cryptographers in the room they were horrified - these algorithms are basically untested, you'd be largely trusting to luck in using one because nobody knows if they're riddled with unsuspected holes.

Accordingly TLS 1.3 deliberately doesn't provide even the broad smear of somewhat known crypto algorithms that had featured in earlier standards, it focuses on a handful of known good options, knowing that if we can't do any of those we're actually fucked and shouldn't waste our time with whatever some random national vanity algorithm does.

SM3 specifically is a Merkle–Damgård construction, which means it was obsolete when it was made. The SHA-2 family (like SHA-512/256) is the tail end of this design, and SM3 is like those except Chinese. Does it being Chinese matter? Not in the least bit. One day, when we need a new cryptographic hash algorithm we will either use SHA-3 or, more likely use what has been learned since SHA-3 to design a more promising sponge construction, we are not going to ship another Merkle–Damgård hash function.

Because it's a national vanity algorithm it has been certified by the appropriate national authority (China's National Cryptography Administration) and is in fact used nowhere.

So that's why it's weird that Odin decided this should live in its "core" library. You aren't using it for "cryptographic work like SSL". Hopefully it's just stubbed out and isn't actually used anywhere at all.

† RSA was invented by Americans, but technically a British man invented the same algorithm first... for the British government, who kept it secret so it was worthless.

[Edited to fix ekr's initials]
> But that's not even the case anymore - many traditional publishers expect you to market your own work and build your own following. They won't spend marketing resources on most writers they sign.

so is the only reason for using a traditional publisher is the cash advance then?
Behind Cheap Stuff from Shein and Temu: A Hard Bargain with Suppliers
Doesn't your PR monomorphize the function every time N is changed ? I realize it's simpler since it keeps the structure, simplifies allocation of arrays, and elides bound check. But it explodes generated code size and matrix size can't be changed at runtime, which doesn't really match C.

Edit: I have tried making an iterator-based version to elide bound checks, but had to resort to unsafe, and it's barely 50% faster than the original rust version (not as fast as C): https://gist.github.com/anisse/6b580628206293ef242faa7db6219...

Edit 2: updated, and my rust iterator version now ~equivalent to C with no unsafe.

Edit 3: too late, the repo has been updated with an other iterator-based version that is just as fast.
Clarification: it's standard for gaming keyboards, which tend to be more expensive. It's not like that cheaper gaming keyboards don't have it (even ~30 USD keyboard has one, if it's advertised as a gaming keyboard).
Hell, even library type software could be licensed under "weak" copyleft license such as LGPL.
I have been playing around with various GPTs lately by getting them to help me with my management consulting work. Usually analyzing docs and merging them or two me what the overlap is, etc.

My experience with Gemini pro is that it often completely and spectacularly misunderstands the ask. No other GPT comes close to getting it that wrong. As a result, I don't have a high level of confidence in it.

I find Mixtral to be quite impressive. It is by far the fastest and gives me good output. At least for big documents kind of work.
This is a custom GPT which is accessible only if you have chatgpt premium subscription. I am just evaluating if there is a need for such a thing, if yes, will think about creating a webapp and making it accessible to everyone.
I’d be happy to take a look at your résumé and portfolio and provide some feedback & next steps. My email is in my profile.
Kissinger had no principles beyond "America biggest bully forever"... He was in particular anti democratic, as soon as this swept somebody into power who was not lined up with that "philosophy". I could say more but he is dead now, like Laos, like Chile, like everything that ghul touched. His meddling still dies damage though. Ukraine, a democracy, has so little active support worldwide, because Kissinger torched the ground and bullies have no allies in weak moments.
Is there another time/place you're comparing it to, specifically?
All water under the bridge now, right? I mean, France never gave that money back to Haiti, but let’s let bygones be bygones right?
Fellow German here. I share your sentiment 100%. I quit consuming standard news early last year and replaced it with reading primary sources if the topic was substantial. Further, there are capable experts on Youtube. However, cutting through the noise and hyperbole takes time, and sometimes experts do not realize having left their field of expertise.

By now, I fully agree with Neil Postman's verdict that news primarily exists to entertain. Many discussions could be decided by looking at a chart if the discussion's participants had the will and competency to do so, which, I am afraid, is regularly not the case.

Regarding the production and consumption of electrical power, I find www.smard.de/home/marktdaten a great tool. Before using it, I had no idea of basics such as the order of magnitude of power production and consumption or the meaning of units like Watt hour. In effect, quitting news helped me to expand my horizons far more than I expected.
Looks like you should be able to do it with the CacheStorage apis

https://developer.mozilla.org/en-US/docs/Web/API/CacheStorag...
I used to commute out of London. It was anything but nice and quiet. I actually had to buy a car, because using train was not viable (expensive, always late and crowded or trains cancelled, often impossible to board). After coming late nth time, manager said either improve this or we will be looking at letting you go.
Getting a car was the best thing I've done.

Our country really need to focus on improving the public transport as at its current state is not fit for purpose.
Writing alternatives to GPL software under MIT/Apache licenses is really harmful for the FOSS ecosystem.

We need to protect end users from more and more proprietarization, tracking and privacy breaching, SaaS and untrusted IoT devices.
Practically speaking, even with `unsafe` the exploitability of rust programs is extremely difficult. With modern mitigation techniques it is required that you be able to chain multiple vulnerabilities and primitives together in order to actually reliably exploit software.

Bug density from `unsafe` is so low in Rust programs that it's just radically more difficult.

My company (not me, Chompie did the work, all credit to her for it) took a known bug, which was super high potential (write arbitrary data to the host's memory), and found it extremely difficult to exploit (we were unable to): https://chompie.rip/Blog+Posts/Attacking+Firecracker+-+AWS'+...

Ultimately there were guard pages where we wanted to write and it would have taken other vulnerabilities to actually get a working POC.

Exploitation of Rust programs is just flat out really, really hard.
Saudi Arabia–United States Relations
Twist is better still than Slack - they force everything into threads, so it becomes a reasonably browsable experience, and therefore possible to maintain async comms with. Slack still wins on integrations, though Twist has a few (including Zapier).
They are not harmed, it just that billion dollar companies are taking volunteers hard work to get even richer and refusing to contribute back. Now, the guys developing BSD obviously don't mind but many people do care.
I've responded to the central point of "there will still be 'unsafe'" here:
https://news.ycombinator.com/item?id=38853040
What a cool little project. It's astonishing how far this can boot with less than a third of the syscalls of Linux implemented.

However, my guess is that the ones that are missing are the more complicated ones. The TTY layer, for example, looks rather basic at the moment. Getting this right will probably be a lot of work.

So don't hold your breath for Maestro running your Linux applications in the next 3 years or so (even without taking into account all the thousands of drivers that Linux has)
https://www.kernel.org/doc/Documentation/process/stable-api-...
Based on the history of Google, it won't matter. The only good LLM they seem to put out is the LLM that isn't yet available to test.

Then, when they do get over the 3.5 line, they will just graveyard it anyway.

They've fully earned a reputation as a marketing parasite.
For most authors the advances are pretty laughable, too. There is a very small percentage that publishers throw all their weight behind, offer generous advances to, marketing resources, etc. The rest of those they sign are more like "filler".

I can't speak for all writers, but here are a few reasons I have seen some authors going with a trad publisher:

* Reputation. It can just feel cool to say "Oh yeah I have a book published by Tor" (or whatever). This one is pretty weak for me. Trad publishers don't hold that much special prestige anymore.

* Translations. There are some great untapped translation markets out there (like Germany). Some authors self-publish the English version of their books and sell translation rights to a publisher. The publisher then does the work of translating and republishing in the target countries, taking that effort off the author. The royalties are lower, but funding high-quality translations can cost a fortune and for many authors offloading that cost and effort can be worth it.

* Audiobooks. Similar to translations. Author may publish the ebook themselves and sell audio rights. Good narrators can cost a fortune, and many authors can't justify that outlay themselves. A trad audiobook publisher can get access to the best narrators and fund the entire production if the author doesn't have the means or desire to do it themselves.
Even scientists doing basic research need to “sell” their research proposals and papers to get them funded and published.

Every piece of professional work has an intended audience, and that means selling to that audience.

A work with no intended audience is a hobby.
This is really bad, because we have the most corrupt government since probably forever.

Nothing is being done to investigate them.

It looks like government is simply bribing security agencies and giving them nice toys in a silent agreement "you don't touch us, we don't touch you".

That said, this is not sustainable.
Perhaps a fault with the rendering, as the source data includes these journeys (see my other comment).

Ryde and Shanklin stations have thousands of journeys to London and elsewhere.
Could you please also build Dillo for WebAssembly, so we can run it inside a Browser, without installing it?

:D

edit: For Windows users, Dillo can just be installed in Ubuntu/WSL with "sudo apt install dillo", and just works. Warning: it's fast!
Good catch. If one is PQ and one is not, that accomplishes the same thing as a hybrid.
I have never been disappointed with a single book in Manning’s “Grokking” category.

It’s a great way to build up an understanding of how something works from the ground up without worrying about the specific code implementation (or using the book as a guide to write one).
I don't think it's that unfair, but I don't want to get into a whole thing about it, people get really upset about criticisms of the Linux kernel in my experience and I'm not looking to start my morning off with that conversation.

We can agree that C was definitely the language to be doing these things in and I don't blame Linus for choosing it.

My point wasn't to shit on Linux for its decisions, it was to think about a hypothetical world where safety built in from the start.
Bitwarden Heist – How to break into password vaults without using passwords
86-DOS Version 0.1-C
> What is something you do, day after day, that is arduous or bothersome? Do you have a subtle itch or a pressing need to make it easier?

If the answer is yes, consider spending a couple of days making improvements to the process, as a frustrated Schnitger did in 1957. Simple solutions to widespread problems can alter the course of scientific history.

--

sigh I guess it's the season for mucking around with my shell again
The future proofing of a codebase from the article is IMHO wrong. This is another form of tech debt as you'll get it wrong almost all the time and it will generate dead code or arcane hacks to make it fit for the actual reality.

The way to proceed here is to fix the architecture when you spot a discrepancy between the current architecture and the current feature you are trying to implement (not more, not less). The cost is low at that point, later when a dozen features get added in the same manner the cost to fix it becomes too high to swallow.
I found the 40 and 50 algorithms book from the same publisher at a library, most of it was machine learning algorithms though.
Good that I did a CTRL+F before posting.

It indeed seems to be a trend to try and supplant GPL software that has served well for decades with hip and trendy probably safer software, that meeeerely has a small catch ... MIT license. I wonder how these projects even attract enough people to be developed. Especially developers of a kernel should be aware of the license side of things, that has protected us all.
Opvia (YC S20) | DevOps/DevEx engineer + Sales development representatives + Enterprise AE | London (UK based)| opvia.io

Opvia wants to be the software layer for regulated manufacturing companies. Regulated industries (Pharma, biotech, F&B) need better software to go to market faster, get insights from their data, and comply with the regulations. Opvia makes it easier to build exactly the procedures and workflows companies need with its no-code platform.

If you are a backend developer familiar with GCP and Terraform and want to have an impact reach out.

If you are a sales professional (outbound SDR or enterpise AE) and want to have an impact on a small sales team with a huge market, reach out.

Drop me a line (alberto@opvia.io) if you need further info or are looking for a different position
The Linux Kernel Driver Interface

(all of your questions answered and then some)

https://github.com/torvalds/linux/blob/master/Documentation/...
The terms and conditions part of the GPLv3 is 4,600 words long, which in typical formatting will be about 7–9 pages long. Not one.
Everything was commercial back then. My point is that mature free implementations of Unix (BSD, Linux) came before free implementations of any superior systems and so they won.
The reality is someone in management said "we need the machine to lock out under X condition for Y reason" and an engineer said "that's a bad idea because Z also someone could die" and management said "do it anyway" and the engineer chose to implement it versus undergo significant financial hardship of quitting their job and finding another one
I read some reddit's post regarding to this topic.

The main takeaway was that living, or higher profits came only if you were being aggressive with ads.

Something like reinvesting 50% of the profits in digital ads (google, amazon).

If your book reaches near top #1, you've done it. Now I realized that most of the books I read published on XXI century had been very popular, top of the chart books in some genre, during some years and I found them trough reddit/forums recommendations. Books that you would still find regarded as best in Amazon.

Internet it's pushing Pareto principle to an extreme. The same goes for music, digital art, cinema, teaching, etc. Small artists are sheltering themselves in services like Patreon because they beat the giants in terms of selling.

Also I think people are reading less. My friends don't read. They pay +15/30 USD a month to Netflix and other services. That's money and time "taken away" from reading, books.
The internet already is awash in untold quantities of crap-quality content, generated by humans and non-AI programs. And that's been the case for quite a few years now.

Emotionally, "AI-generated content" makes a good boogeyman.

But rationally, "you can have your free cake (internet content), and trust it too" was always a techno-utopian/libertarian delusion. If that's your "promise of the open internet", then it was always a lost cause.
speaking as an ex microbiology/immunology technician, these things are brilliant - i really can't imagine doing the job without them.
"If you are familiar with the IBM PC, you'll probably know that MS-DOS was based on a product called 86DOS from Seattle Computer
Here is one of the earliest builds of what became Microsoft's darling.
It's been compiled in July 1980, and less than 10 people had seen it.
Until now."

https://x.com/ntdev_/status/1741983693365784897
It is still a great learning exercise IMO. Knowing which features are good/familiar to use, but difficult to implement, lets you explore other avenues, like news_to_me and the backslash for lambda [1].

For me, for example, I was gonna go with async/await in my toy language, but didn't like the implementation and decided to explore a monad-like direction.

[1] https://news.ycombinator.com/item?id=38851863
I thought Haiti was still paying until the 20th century? This is from Wikipedia:

> The first annual payment alone was six times Haiti's annual revenue.[1] The payment was later reduced to 90 million francs in 1838, equivalent to $32,535,940,803 in 2022, with Haiti paying about 112 million francs in total.[3] Over the 122 years between 1825 and 1947, the debt severely hampered Haitian economic development as payments of interest and downpayments totaled a significant share of Haitian GDP, constraining the use of domestic financial funds for infrastructure and public services.
This video just got suggested to me 2 hours ago, and I started looking what this is all about.
Thanks for the kind words about OptaPlanner. We've forked OptaPlanner as Timefold. We don't have a wedding seating example in timefold-quickstarts, yet.

Someone did an wedding seating planning implementation 10 years ago: https://github.com/juanignaciosl/wedding-tables-planner
but that's going to be very stale (still DRL files etc). It's probably better to start from the school-timetabling use-case in timefold-quickstarts and adjust that to your needs.
The gp means they’ll use the same algorithm to publish the next book.
This is for sure the top. Offering alternatives to this thinking is helpful. For example, the 70s, 80s pushed some of the US middle class upwards [1] (and some not).

[1] https://www.baltimoresun.com/1992/03/08/us-middle-class-shra... | https://archive.is/hgtpq
*30 years...

Yes, we're that old.
Is there a term for such hyped up language?
O(N), but amortized O(1).
If I've seen this on a flash card I'd have guessed it's a variant of Python.
No one has to do anything, that's not how politeness works. You choose yourself whatever is most reasonable to you.

The situation is not quite analogous however, since Germans generally don't mind us calling their country "Germany" (I have never heard of any dislike of the name) whereas (quoting from Wikipedia)

> Therefore, in April 1986, the government declared that Côte d'Ivoire (or, more fully, République de Côte d'Ivoire) would be its formal name for the purposes of diplomatic protocol and has since officially refused to recognize any translations from French to other languages in its international dealings. Despite the Ivorian government's request, the English translation "Ivory Coast" (often "the Ivory Coast") is still frequently used in English by various media outlets and publications.

Its similar to nicknames with real people. Some people don't mind having their name shortened or adapted however people like, while others people really don't like nicknames. You use nicknames with the first group and call the second group by their formal names.
If you want to give hope you'll have to give a lot more detail than that. I might even say evidence.
Organ pipe physics
Technically If you go west, and continue to go west past Ghana, from Ivory Coast you will get to Nigeria.
Ok I reached 19,098 and I think it'd take a lot of time to improve that. It gets too fast at level 50 for my mortal reaction-time.