skysight-inc/HackerNews huggingface dataset:
> Many of the most damaging recent security breaches happened to code written in MSLs (e.g., Log4j) or had nothing to do with programming languages (e.g., Kubernetes Secrets stored on public GitHub repos).

I’m surprised Herb is so defensive here. He normally strikes me as level-headed but he’s arguing in bad faith here. There’s no way a language can prevent arbitrary code execution if the programmer intentionally wants to allow it as a feature & then doesn’t think through the threat model correctly or not managing infrastructure secrets (the latter btw is mitigated by Microsoft’s own efforts with GitHub secret scanning although there should be more of an industry effort to make sure that all tokens are identifiable).

But C/C++ is a place where 60-80% of the vulnerabilities are regularly basic things the language can mitigate out of the box. No one is talking about perfection. But it’s disappointing to see Herb stuck and arguing “there’s other problems and even if memory safety is an issue Rust has problems too”. The point is that using Rust is a step function improvement and provides programmers with the right tools so they can focus on the other security issues. A Rust codebase will take more $ to exploit than a C/C++ one because it will be harder to find a memory vulnerability which is easier to chain into a full exploit vs attacking higher level stuff which is more application specific.

EDIT: And language CVEs are a poor way to measure the impact of switching to Rust because it’s the downstream ecosystem CVEs that matter. I’m really disappointed this is the attitude from the C++ community. I have a lot of respect for the people working on it, but Herb’s & Bjarne’s response feels like an unnecessary defensive missive to justify that C++ is still relevant instead of actually fixing the C++ ecosystem problems (namely their standards approach is making them move too slowly to ever shore up their weaknesses).
Gonna save this post for some arbitrary point in the future to pull out as a point against ‘impossible’. Might have to gift it to my descendants to make sure it’s available for long enough… /s
> But seriously, how it the Government supposed to regulate how much computing power you use, its a ridiculous idea.

Same way we saw runaway power consumption from Bitcoin miners. Every gold rush brings with it pressure on resources and both direct and indirect impact on others.
My leading comment - "How do I get to Dublin?" "Well I wouldn't start here"

All of the alternatives you (and I) mention - Carbon, Cppfront, Circle, aren't really fragmentation. They're all experiments at the moment, and all useful in testing out ideas in various different independent directions.

The only comment I'll make about Rust, is that it's going to do a C++, and inspire another generation of languages (e.g. Hylo) that will takes lessons from it and improve - perhaps a nicer syntax, or better type inference and generics, or more formal proofs baked into the language. It's not an end-point.

Can C++ be truly safe? I don't know, to me it seems totally at odds with where the language started, choices made and baked into the language, and where the very broad community and committee currently are.
> as Hurb explain in this article, between tooling and reasonable default, it possible to achieve pretty good level of safety in practice.

This is the main contention. For those who believe in the technical leadership of the committee, this feels like a reasonable way forward.

I'm sure in theory these issues can be tackled, it's just that in practice the C++ community has always chosen performance over any other concern (https://research.swtch.com/ub). In that context, where you can change the APIs but you can't change how a whole community behaves, these articles by Sutter and Stroustrup feel like a Hail Mary play to address the valid concerns raised by multiple organisations around memory safety. I think we'll find out in 5 years if their optimism was well founded.
https://archive.is/0nyDC
There are a lot of reports of Putin actively interfering to destabilize the west, and also reports in places like the NYTs about the US expanding bases in Ukraine to provoke Russia into the war. These aren’t Twitter rants, they’re in our mainstream “big” media outlets.
[Author/submitter here]

> but perhaps there's an alternate universe where they did jointly launch OS/2 due to business needs

Did you not see the subtitle on my article?

"It fell through a timewarp from an alternate and very different computing universe."
One of the benefits of using "human like" surrogates is the compatibility of hardware. Lets say its a spartan type design, if a human needed to be on the front lines for that space warfare to manage things then taking the hardware from a surrogate make all the other things in war easier (fabrication, supply, support, etc...).
What if you normalize for the amount of code in the wild? Relatively little software I use day to day have significant amounts of rust in them (only Firefox and my phone OS, probably...). Even in firefox, there is far more C++ than rust...
It's well known that Youtube already has a sea of bizarre garbage content targeted at children. It's hard for me to imagine that AI could even make it worse than it already is.
Why does a whistleblower need to be identified? Why can't it be an anonymous tip to the regulator, who then uses the tip during audits to dig deeper and get to the truth? If they can't get to the truth even after being provided a tip, then their audit process is too broken? This whole business of non-anonymous whistleblower has too much power-imbalance and always seems to end badly for the individual.
> China's methods are effective at stopping corruption dead.

Forcibly silencing anyone who tries to talk about it?
I’ve had compression noticeably speed things up even over a wired lan
I detailed my understanding of this case in a sibling-comment to this one, but I think the fact that he wanted to "do the same thing" (read: use the for-profit engine to fund AI research) only makes his case stronger!

If I understand correctly, the OpenAI board asked Musk to remove himself and sell his stake as his for-profit pursuits conflicted with the mission of open, non-profit research. But after he left, they started a for-profit subsidiary and did exactly what they didn't want him doing. I could see how a judge might side with him.
> Doesn't this rather imply that IBM would have priced OS/2 reasonably

When I was around 11 or 12, I had a retail copy of OS/2 2.0 which my dad had bought me at some computer fair. Don't remember exactly how much it cost, but my recollection is it wasn't expensive–he would not have bought it for me if it was.

I was amused by the fact that the box had a "Made in Australia" logo on it–the box and physical floppy disks were made here, but I doubt much of the software on them was.
> no one mentions is the feedback loop between a strongly typed language and copilots ability to more accurately generate code.

Dang, I never thought of this.
So the guy goes on for years being an outspoken whistleblower telling his story to anyone that would listen, and decides while in his hotel waiting for his deposition that now would be the best time to end it and not move forward with holding Boeing accountable.

Occam's razor isn't pointed in the direction you think it is.
> Maybe he wanted to cast suspicion on Boeing.

Ridiculous. Although I agree there's more than one possible, highly disturbing explanation for this.
Over 12M auth secrets and keys leaked on GitHub in 2023
The Lambek calculus. Categorial grammars. Meanings are proofs. Not clusters of directional magnitudes in space.
Fx 32.0, now with YAML support too
Cashu – ECash for Bitcoin
@dang: did this get flagged as spam by chance?
This is amazing. I was able to open it and start creating animations! Thank you for this contribution!
Yes! That's what I was thinking.
Thanks, I'll donate soon.

Also this is a long shot, but any chance of supporting higher level languages. Maybe it calls the underlying Rust code from C#
Technically humans are dunking on all other animals. We're killing them all rather handily.

I'm arguing against the group that think humans aren't animals, that they are imbued with some extra metaphysical secrete sauce that we are incapable of understanding.

This group usually come out strong against any of these studies that hint at some continuum that includes humans and animals on same scale. Even if humans are on far end of the scale.
Cost Efficiencies with Azure and Serverless
Anti-trust regulation enforcement against Bell Corporation.
It'd look exactly the same, because been-there-done-that.

IBM went that way with the PS/2 systems - microchannel, 8514 graphics, supported my IBM PC-DOS (and OS/2, and IBM-OEM'ed Windows).

IBM before that had the BIOS lawsuit against Compaq (https://www.allaboutcircuits.com/news/how-compaqs-clone-comp...) attempting to defend their market ownership; PS/2 came after in the attempt to "re-corner" the market in a way one would today call "Apple style" (walled garden proprietary HW/SW). Too late though. But not for lack of want on IBM's side.
The original paper included source, and that has their test data and results -- it gets ~77% accuracy on about 20k example word analogies (with 99.7% coverage), and 78% accuracy with phrases with 77% coverage (and a much smaller data set, 3,218 examples). You can see the test sets here:

https://github.com/tmikolov/word2vec/blob/master/questions-w...

https://github.com/tmikolov/word2vec/blob/master/questions-p...

and you could see how much better LLMs do on the same 20k examples.
>Maybe he would have done it anyway at this point in his life.

You'd think after he was done with hearings, something he was been advocating and trying to have happen since 2017. Why would he do Boeing a favor and kill himself before he could inflict further damage to the company?
https://m.youtube.com/watch?v=H-fC9uNyhWo

Also, the human scientists figured out ape intelligence to the point where they can design puzzles that are too hard for the apes to solve, and they figured out how to use that to further study the apes. Underestimate the apes? These scientists seem to be absolutely dunking on the poor little guys. They should go pick on orcas or some other actually clever species.
But the potential benefits to humanity from AI are far greater than the utility of a person getting from point A to point B in the car.

So there is a far greater potential gain, and thus perhaps we accept a greater risk to achieve it.

Don't get me wrong. There's certainly a risk and I am not here to try to downplay it or anything, but just the fact that there is "a" risk, doesn't meant stop. It means let's figure out what the risk really is and what the benefits are, and then decide if the risk is acceptable or not.
There's a sweet spot number of contributors which provide valuable feedback, testing, ideas and maybe some code. It's not that difficult to get to that sweet spot, the problem is staying there. It may happen that the number grows too much, and you get overwhelmed, burned out (eventually).
I’m pretty sure this article was at least partially ai generated
Code Page Information
How wouldn't distances be preserved under rotation. I'm asking for a friend of course.
Boeing isn't a person, it's a collection of individuals all trying to further their career. That's another executive's problem, their job is just to maximize their career earnings / potential while at boeing and then jump ship when the timing makes sense to.
> Which would be all around moot because the fee itself is illegal

I haven’t seen any statement in any jurisdiction by lawmakers or judges that supports that claim. It also would, to me, feel inconsistent with the rulings I read about:

- https://en.wikipedia.org/wiki/Epic_Games_v._Apple#Decision: “Rogers found in favor of Apple on nine of ten counts brought up against them in the case, including Epic's charges related to Apple's 30% revenue cut”

- https://developer.apple.com/support/storekit-external-entitl...: “Consistent with the interim relief ruling of the Rotterdam district court, dating apps that are granted an entitlement to link out or use a third-party in-app payment provider will pay Apple a commission on transactions. Apple will reduce its commission by 3% on the price paid by the user, net of value-added taxes. This is a reduced rate that excludes value related to payment processing and related activities”

What did I miss?
I think the reason it seemed effective was the very low number of actual rabies cases. Rabies had (and still has, to a degree) a big shadow. It’s a SCARY disease, and everyone knew about it, but it was also very rare. Whenever people got bit by a dog they were probably worried, but they also probably weren’t very good at telling the difference between an aggressive dog and a rabid dog. In the article, the farmer’s neighbors “quickly concluded that the dog was probably rabid”, but I wouldn’t assume they arrived there by purely rational means.

Then look at the “rules” for the mad stone. It can’t be sold (so doctors or scientists couldn’t buy one and test it), and if you apply it to an animal it will stop working (so you can’t test it on animals). The rules keep it from being tested. Mad stones were a comfort blanket.

I don’t think this was deliberately cooked up as a way of tricking people - if so, why not charge for it? I think there were a lot of remedies that didn’t work, and the one that happened to fit the societal need of “something to comfort the large number of dog bite victims who were scared shitless that they might have rabies” (while not being easily falsifiable) survived.
TikTok filters are AI generated video, right?
This is wonderful. I love the simplicity of this tool and my kids loved it.
Other than most of it, including the "wind up" part. And, how messed up does a plant's genome need to be to prevent you from easily sequencing the whole thing? How do the companies in the book keep a base sequence for the unmodified plant secret? Because if they don't, you can align the partial sequences from the modified version to that, making the modified version very easy and cheap to sequence.
The Accidental Discovery of a New Vulnerability in Google's OAuth Implementatio [video] (2023)
I saw this when visiting relatives. At best it was auto-playing mario party game or something... At worst something entirely bizarre and pointless.

The later might as well been computer generated...
No one has claimed that the term "mainstream media" has its origins in far right politics. The claim made upthread is that the term "mainstream media" is a dogwhistle term often employed by the right wing.

I will not be providing evidence of that, as ample enough evidence for that can be found easily with a simple internet search.
They're not general purpose computers, even if architecturally they could be.

Apple amply touted the iPhone's capacities ("there's an app for that") and smartphones are defacto a core component of our lives. The Switch isn't.
> copy took seven hours because the new laptop didn't have an Ethernet port

Buy a USB to Ethernet adapter. It will come in handy in the future.
DBOS – Transactional Serverless Platform for TypeScript
Alternatively, Vyvanse or Ritalin work great. For me, Amphetimine salts have too much of an edge
This makes me sad; such a missed opportunity.
Access to gaming is not critical to participation in a modern economy. Whereas a phone gives you access to banking, government services, medical services, emergency services, education, information, news, wayfinding(GPS), shopping (especially if you live somewhere remote) are just some examples of things people do with their phones. And that's not just some people, like 80-90% of all people.

It's not the same.
Just LinkedIn searches and Indeed.com searches
https://news.ycombinator.com/item?id=39680852
If I ask you to turn on your head lights at day time, am I ignoring your personal freedom?
You can ask anybody anything and it won't interfere with their freedom I think.
You are free to not even listen to the question...

I might judge you based on your decision and chose to ignore you in future. This again would not violate your personal freedom I think
You’d also have to define what “use” means. Your traffic that goes through Cloudflare hits Rust code: does that count as a “use”? Sites you use that rely on AWS almost certainly hits Rust code, does that count as a “use”?

I think it’s kind of stretching it, but these are services where issues in them could impact you, so I don’t think it’s a total non sequitur.
Show HN: Curator – simple tearsheets app for macOS
It's sad to see Apple adopting kind of an Oracle way of business. "Kind of"...

They were screwed by Microsoft in the past. And now they're the ones screwing every single small and mid-sized software shop everywhere.

When will we stop buying their products?
Uhg the other day i found a job posting that initially looked russian, but on further looking i was able to understand far more of it than i ever could russian. I inspected the source. Some weirdo developer set "font-family: Symbol" on every div. Not even in css, right on every divs style tag
This could be good for audio podcasts uploaded as videos to Youtube. I was using things like Headliner.app and moving backgrounds in Camtasia for visual interest. But also seconding the need for audiograms.
What technologies are we expecting to be open sourced from those companies?
That's an insane number (to me). What do you consider to be your "best buy"?
> How is is that dark energy density does not change with time?

Because that's how a cosmological constant works.

There are alternate models where there is "dark energy" (as in, stress-energy that causes accelerated expansion) whose density does change with time (for example, a "Big Rip" model in which the dark energy density increases with time), but such models do not match our best current data.
For clarification, "The Matrix" refers to the urgency vs importance decision matrix and not the movie: https://asana.com/resources/eisenhower-matrix

It's a framework to prioritize important tasks instead of falling into the agency trap, akin to prioritizing meaningful strategic tasks such as product development and tech debt instead of fighting fires.
Claims they don't see the value in "upgrading". Upgrades every 2 years.

You...think there are many people in 2024 with an even higher upgrade pace?
The fundamental problem here is that 300 years ago the population was measured in hundreds of millions. Now it's measured in tens of billions. You are no doubt aware of the problems that cities and civilization faced while growing in that direction?

I'm not trying to argue with you about the merits of our current population size. But what I'm trying to point out is that your solutions of "local problems should have local solutions" don't work very well when you have 10,000 people in a 1000x1000 area. Suppose you were in New York City, where would you put the sewage to be processed by those 10,000 within that 1000x1000 area? I'm starting to wonder if you are considering these problems, or if you rather have a pet philosophy and a utopia that you want everything to conform to.

Just to let you know, utopias are not "ideal" in the sense that they are great societies to live in and I can think of examples of utopias that are very very bad for individuals. It's not something to be strived for it's a tool for thought experiment. You might appreciate most the concept of an Industrialist utopia, where all time is measured, efficiency is maximised, workers are tools, and resources are meant to be extracted.

To address one of your points regarding sanitation: we do not "[take] all the sewage and [group] it into a river of muck to discharge it at sea." If you look at how a modern sanitation system works, the sewage is very highly treated before discharge, and it flows through entirely separate, self-contained underground waterways before it reaches the processing center. To liken this to dumping untreated sewage into the sea is very disingenuous. Solids, chemicals, bacteria, salts, and other undesirable elements are extracted either in settling ponds or via aerobic or osmotic extraction. And it's utterly impossible to build and maintain something like this for a community without levying some tax from that community. Even something as simple as a community septic system requires ongoing maintenance and repair.

But everyone in the community benefits from not getting the diseases that are associated with having untreated sewage flowing on top of the ground. If one person in that community is allowed to opt out, what would they do with their sewage? In the worst case they might dump it on the ground, which makes everyone around them sick. What you propose is that they should be allowed to ignore externalities and do their own thing. That's not fair to the other 9,999 people in the 1000x1000 block who don't want to get cholera and typhoid and anything else from that 1 person's untreated sewage.
[Author/submitter here]

> The only way this would have happened is if Dave Cutler had never left DEC.

Yes and no.

Things happened the way they did because DEC cancelled Prism and Mica and he decamped to MS.

But the point here is that, 3 years before NT, MS had a very capable 386 OS and this shows it, complete with screenshots.

Windows 3.0 was extremely poor by comparison and I speak as someone who deployed and fixed countless copies of Windows 3.0, 3.1, and Windows for Workgroups, all the while running OS/2 2.0 at home.

We're not talking about that alternate history here. What the article is about is that MS had a complete working 386 OS in 1990... but chose to kill it, and it would be another 3 years before its own in-house version was ready, and a decade after that before that in-house 32-bit OS finally replaced DOS-based Windows.
It is a set of glyphs and their encodings. How is that 'Turing complete'?
And it's stupid to get moral panicked about.

People are 99% nature, 1% nurture. We evolved to survive worse than witnessing pregnant Spider Man.
Bloclchain is still an answer to question no one knows
I think it's about Epic's account ban and reinstatement afterwards.
German military still faxes documents and cannot radio allies, official warns
With cppfront, Sutter is explicitly not trying to create a successor language. His goal (like TypeScript to JavaScript) is to provide a complimentary, parallel language which provides complete forwards/backwards compatibility with C++. His hope is that (like TypeScript), the languages and communities evolve together.
Any other technology that involves developing new tools, migrating code, or lacks completely frictionless interop will be inherently fragmentary. It reminds me of the classic XKCD comic:
https://xkcd.com/927/
I imagine cooling will be a challenge.
I thought it would be useful to share the story behind our project's README.md, which got our GitHub repo to 4k stars in just a week.

Took all our learnings and made a guide that we hope can help your open-source project.

Love to hear your thoughts, comments or criticisms about this.
> I raised many of the author's point about Sourcehut several times. I'm an, enthusiastic FOSS supporter who has always advocated for alternatives to Github. But Sourcehut seems to take the worst out of everything. It strips down all the features, provides a web interface that seems to come out of the 1990s, removes anything that is even vaguely interactive in favour of emails, and it turns reviews and PRs a mess of emails and patch files that is impossible to browse.

That's exactly what its goals are. Sourcehut is for people who want to do everything out of email. All of this is a feature. Stop trying to make it GitHub. If it's not for you, it's not for you.

For some of us, Sourcehut is a revelation. Sourcehut works for its users rather than its users work for it.