skysight-inc/HackerNews huggingface dataset:
> Don’t take this the wrong way, but I don’t think compiled languages are for you.

You just need an adequate build system that can perform incremental compilation and does not run a whole lot of unnecessary steps on every build no matter what changes.

Where I work, our system is huge and includes code written in multiple languages. A change to a "leaf module" (one which is not depended on by many modules) takes a second or two. You only get into 10s of seconds if you change code that affects the external API of a module which triggers the re-build of many other modules (a "core" module) - because in such case there's no escape and many LoC must be re-compiled to verify they still work.

To keep it this way is not easy: you must constantly fix mistakes people make often, like add a new build step which runs unconditionally - everything should run conditionally (normally on whether its inputs or outputs were touched), and optimise things that take too long (e.g. slow tests and moving code that changes often from core to a leaf module).
Bugs all passed the tests sounds like survior bias.
Like how all the fighter planes that returned with damage had damage to the wings.
Point is, damage anywhere else was fatal, the takeaway should not have been to armor the wings more, which was the first thing which was tried.
Likewise thinking about bugs this way discounts potential bugs that _were_ stopped by tests.
That pipeline blowing up lead to a pretty insignificant methane release compared to whatever is happening yearly. As in, at most 5-10% of what the oil and gas industry releases anyway.
3rd party passkey provider support is possible on Android if:

- You are using Android 14

- Your manufacturer has added support for it (e. g. Oppo and OnePlus still haven't)

- If you want to use them in chrome, you need to enable the experimental feature at chrome://flags , search for "passkeys" and enable the feature for 3rd party (for brave just replace "chrome" with "brave"

Even with that, support may still be a bit buggy, such as:

- Chrome displaying the "Google Password Manager" logo instead of your password manager's one

- The app/website not understanding properly how to implement them and sending wrong values / sometimes invalid payloads

But let's hope this technology gains massive adoption, proper support and can help non-technical users benefit from increased security at (almost) no cost.

Disclaimer: work for a Password Manager
Another computer shop i worked in charged $90 for virus removal, but we also eventually made it policy to just reformat/reimage the drive and remove all the crap and fully update the OS. Prior to that the policy was "remove viruses, remove crapware, update OS", but we had a few customers that had machines with 30,000 viruses. I forget what the record was, but it was way up there in count. Trying to clean those machines had a marginal failure rate, enough that it was costing the owner money to have us repeatedly clean them without payment.

No one wants to tell a customer that they need to find better adult content sites, and that we won't be cleaning their machines without payment anymore!
It's a common misconception that the reason we should be more frugal is to save the planet, ecosystems, or cute animals.
Which species is good at long term thinking?
What makes unions antipattern in your view and why TS is a “sandbox with nonsense constructs”?
Why not have both? A single server/service AND easy-to-install modules providing atomic functionality? Just make the install/uninstall process easy (like just downloading and optionally unpacking a modules archive into installed_modules Dir)?
The Medium Is The Massage (1967)[video]
This is why I'm excited for Web Assembly. Writing an efficient high performance, mutli-threaded GUI in Rust or Go would be awesome.

Just waiting on it to be practically usable
One of the scariest stories I've read on HN - the amount of technical debt must be staggering...

see https://news.ycombinator.com/item?id=18442941 - a day in the life of an Oracle DB developer.
Well, I have two apples on my desk. I can't have an infinity of anything. In that sense 2 exists more tangibly than infinity.

Our best physical models are just that - models. All models are wrong, some are useful. Infinity in physics is usually a shorthand for "it's so big I don't have to care about the edges"
Now do telecom companies for the same thing. This is fucking stupid, people are going to buy drugs and prostitutes through any medium. Just legalize and regulate already, but that would remove an easy wedge issue and congress can't have that. Gotta keep the people yelling at each other so they don't notice their paychecks being skimmed more and more.
The whole article can be boiled down to tests are an investment and you should make sure your investments have a return.

It sounds obvious but it's a valid point. It's more common for people to have a dogma based attitude to testing to an investing approach.
considering macOS is doing the right thing, shouldn't the title read JVM crashes on macOS 14.4 ?
For users who currently reuse weak passwords, passkeys are a security upgrade. For users who use strong unique passwords + FIDO keys, it is a downgrade. Both types of users exist.
right across the border in Mexico there's a pharmacy literally at every corner near San Diego, and no prescriptions are needed, you are correct.... The one at stopped at the lady let me know that she was watching the show Breaking Bad on the TV behind me... she was old and asked the other lady to get out of the store before we started doing business... she would not sell me Fentanyl though. She would only sell oxys, percs, and other stuff. I didn't buy anything though.
You didn't even bother to read the comment, did you?
I like how the "cloned cards" are categorised as "Business","Financial Service" while the drugs seem to show up under "Health/beauty", "Medical Service", and even "Musician"(?)

I also wonder if they are actually honeypots --- that could explain why they stay up.
Basically always worse in languages other than English. Not sure if it's just from volume of dataset or if it has to do with dataset quality, or the GPT architecture is inherently English-centric, but LLMs don't have like, a universal subconscious with superficial English frontend wrapping UG, like such that would support !(sapir-whorf). LLMs so far are kind of English-based thinking machine(if we were to recognize their apparent behavior as "thinking").

Below is just cherry-picked search results, selected largely by whether last few lines in the abstracts support my narrative, but I mean, it's a problem obvious enough that the rest of the world just knows.

0: "Not All Languages Are Created Equal in LLMs: Improving Multilingual Capability by Cross-Lingual-Thought Prompting": https://arxiv.org/abs/2305.07004

1: "Better to Ask in English: Cross-Lingual Evaluation of Large Language Models for Healthcare Queries", https://arxiv.org/abs/2310.13132

2: "Do Moral Judgment and Reasoning Capability of LLMs Change with Language? A Study using the Multilingual Defining Issues Test": https://arxiv.org/abs/2402.02135

3: "Should We Respect LLMs? A Cross-Lingual Study on the Influence of Prompt Politeness on LLM Performance": https://arxiv.org/abs/2402.14531

4: "Exploring Multilingual Human Value Concepts in Large Language Models: Is Value Alignment Consistent, Transferable and Controllable across Languages?": https://arxiv.org/abs/2402.18120

5: "How do Large Language Models Handle Multilingualism?": https://arxiv.org/abs/2402.18815
Probably the Security center or the Mi account app. It will send the phone into a reboot loop.

Here's a writeup about packages which are safe to remove in MIUI: https://wooptoo.com/blog/safe-to-remove-packages-miui/

This is from a few years ago but it should still apply today.
> Perl was rightly bashed because it was the poster child of cowboy coding, which flies in the face of good engineering practices: Understandability, predictability, reproducibility, measurability, safety.

That’s the meme, but it’s simply not true.

I’m going to use Python as a basis of comparison because that’s the language which, from my perspective at least, seemed to replace Perl.

> understandability

A lot has been said about sigils but ultimately a language is only as familiar as a developers exposure to it. Python appeared easier to understand for the newbie because it favoured words over expressions but now that Python has matured it’s become just as incomprehensible too.

> predictability

I’ll be the first to admin that there are a couple of really massive footguns in Perl which are remnants of its evolution as a shell tool. But there’s other aspects to the language which are really clever. For example the way Perl does type comparison is much more predictable then Python.

On the whole, I think those languages are about equal.

> reproducibility

CPAN was also light years ahead anything also available at the time. And still is in many regards. For example, Python environments is a mess. Perl is one of the most portable languages out there. Want to change the state of the runtime? Just add a line to the top of your source. Simple.

Python and JavaScript are a completely pain in the arse in comparison.

PHP is another example of a language that gets this right. Few people on here (myself included) will have much love for 2010’s PHP but it just goes to show that a lot of the languages “real programmers” praise do actually suck at a lot of the basic principles.

> measurability

Not really sure what this is intended to refer to. Maybe APMs? Either way, a lot of diagnostics like that came into vogue after Perl’s decline so this isn’t really the fault of the language but more just 3rd party tool writers putting their focus elsewhere.

That all said, don’t be fooled into thinking such tooling doesn’t exist for Perl.

> safety

Perl basically invented unit tests amongst the scripting languages. It also has stricter run modes to differentiate between one time scripts and important business code.

Saying Perl lacks safety demonstrates a lack of experience with the language.

——-

I’ve written production Perl, PHP, JavaScript, TypeScript, Python, C++, Go, Bash, Visual Basic and even Pascal. De-mangled other people’s spaghetti code in all of those languages too. Probably a few languages I’ve forgotten about too. Perl is one of those languages people love to hate but is, in my opinion, one of the most misunderstood.

[edit] I should have added a comment about Perl’s backwards compatibility. Few other languages even come close to the longevity of Perl 5. And that commitment extends down throughout Perl’s ecosystem. With JavaScript I’m constantly scared the next npm update will break the project.
Having used all three major OS’s for music at different times, MacOS is still my go-to. There just isn’t the futzing I had to do on windows. Linux was actually a contender for me back in the day - I feel like MIDI routing on Linux is just easier[1] although older OSX touting was also very good imo. I kept my G4 tower going for a looooong time because I had just the right setup of tools and hacks to do everything I needed to where windows wouldn’t cut it and no one wrote the drivers I used for Linux.

These days I don’t tinker like I used to and mostly just need simple MIDI routing and something that can copy renders from my mixer, so anything will work. I still prefer the ease of MacOS though I can do everything I need to on any OS

[1] the main drawback for Linux was really a lack of good docs for things like PD, and not having access to Live. If I’d had Reaper back then it might have been my daily driver.
A bit of a tangent but do you have a view on prices for hardware security keys like YubiKey? For private use they're a pricey option, especially if you get a few backup keys. Could a big actor like Google, if they wanted, scale up production, sell at cost and get prices down to say $2 each? Or is the components and manufacturing inherently more costly? Is there anything on the horizon that likely will bring much lower prices?
Are there any non-determenistic compilers? I mean if we freeze source code and compiler flags, will binary result (compiled program) always be the same?
My biggest gripe is how often Nextcloud goes into maintenance mode. While this is currently slightly annoying, Nextcloud would quickly be rendered useless to my family would I pass away.

Please keep the upgrade process hands-off.
It is not surprising that you posted this flame bait from a throwaway account.

What is wrong with Debian?
Sounds like you are talking about frontend development. In that case you are trading off speed for accuracy. Some dev server tooling has this issue.

Most systems built on Vite though do check across files, so likely that's just a bug in the build system you were using. A bug that is likely fixed.

One thing you can be assured of is that when you actually build your app (hopefully using CI), it will find those problems, because you are not relying on hot reloading to do it.

On the backend side it's far less common to use a build server model, and personally not very warranted -- building a frontend app can take a lot of time and the feedback cycle needs to be short for a dev to be effective. On the backend, a small amount of time rebuilding the app before it is rerun is not nearly as costly. If your Typescript codebase is so large that the feedback cycle of rebuilding is too long, well you have to take the tradeoff, but it's a rare problem.

Understand that the only way a "dev server" style backend build process is saving you time is by not checking the types during recompilation. It wouldn't be surprising that it would miss typing changes.
Hockey sticks you say, I have an article for you https://dothemath.ucsd.edu/2022/09/death-by-hockey-sticks/.

If we continue our current growth of energy use, we'll be using the entire luminosity output of the milky way galaxy in, drum roll, 1000 years. I'm skeptical if that's going to happen. To me a much likelier option is that the exponential growth stops at some point. The trajectory of the slime mold is also a hockey stick, until it isn't.
I use all the same things as you, but PayPal doesn't use WebAuthn (that I can see). It's just 2FA hardware tokens, which should work fine (and I do get a prompt to use a USB key on Firefox).
> But what if I put the code in the data section, but left the data section executable and jumped there?

Data sections are usually not executable. Even if it were, that still leaves some code (the jump) outside of the data section.
> the laser photons took about 50 seconds to get from spacecraft to telescope
Top line of top graph: 2024 ocean heat

https://climatereanalyzer.org/clim/sst_daily/
It is not. -i'' is exactly the same thing as "-i", and while GNU sed interprets this as an empty suffix, BSD sed expects -i to take an argument normally, and will treat the next argument as the extension. If you instead use sed -i "", as is appropriate with a BSD sed, GNU sed will interpret that as the empty program and try to read from a file named your actual script.
That's one thing Apple did do right on ARM:

> The frame pointer register (x29) must always address a valid frame record. Some functions — such as leaf functions or tail calls — may opt not to create an entry in this list. As a result, stack traces are always meaningful, even without debug information.

https://developer.apple.com/documentation/xcode/writing-arm6...
tl;dr; be careful with your testing strategy, it might break your company. There's some aspects that stand to gain from automated testing, it's important that developers test their work, but in my opinion manual testing is super valuable especially for an early stage start-up.

I was working for a startup that first had the strategy of testing everything, at a point when we didn’t even start working on the product. We spent a horrible ammount of time getting the test system up and running (microservices, browser add-ons), with the UI testing being the most challenging.

But then they also wanted to "move fast and break things", which we did, so we spent an annoying ammount of time fixing breaking tests. This is when the “let’s just delete the test” expression started popping up.

So we ended up with an unmaintained testing system that no one cared about anymore, keeping our build on red because we always had the testing system in the backlog so it was going to be done at one point.

Then, the quality of the codebase started degrading to the point where we’d wake up with features that have been broken for a while and no one noticed it, even though each individual developer was testing their own flows. We had no one / nothing testing the entire system.

At this point, I suggested we hire 1 – 2 manual testers, as our testing strategies are obviously failing, the product is suffering in terms of quality and we could get them for relatively cheap compared to dev-time. I’ve had great success working with manual testers for very complex products with real world repercussions, compared to this tiny start up in dev tooling.

They refused. So they decided we’d do cross functional testing and then test the entire system whenever we’d do a merge. So developer velocity fell from a cliff because we became the manual testers. We still had no customers at this point. Runway got shorter and shorter. And the start-up became a statistic.
Do you have eyes?
It was a film :) .. wouldn't let that in serious conversation.

https://m.youtube.com/watch?v=OLNagvJHl3g
This [1] is the list that UAD uses.

[1] - https://github.com/Universal-Debloater-Alliance/universal-an...
bug? POSIX compliance? How?
You can't easily root your phone these unless the device is popular and has some community support. Immediately after buying I tried to root my realme gt 2 device and it got bricked. Fortunately it was under warrenty, I went to to customer support and told them it isn't booting up after an update.
They fixed it with an internal tool. I haven't tried since.
> Shame on Facebook for enabling children to communicate with each other about drugs.

Did you read the article? It has nothing to do with children messaging each other about drugs.

The investigation is about people and companies (including Canadian pharmacies and criminals) using Facebook to publish content and Ads for prescription drugs they can't legally sell and counterfeit drugs that are presumably dangerous/illegal - ads and public content. Facebook is being accused of not checking if an advertiser can legally sell those drugs or just allowing blatantly illegal sales pitches
Ask HN: Why does Apple use an architectural license from ARM at all?
I've been reading news and blogs about Apple's transition to designing in-house their Apple Silicon chips on their mobile and Mac computers. But I still don't understand the rationale specifically for paying for an architectural license just to re-implement somebody else's Instruction Set Architecture all over.

Many articles explain why other companies buy ARM IP in order to use reference ARM CPU designs as-is, or to make incremental modifications or extensions to those; and yet many articles claim Apple is nontrivially re-implementing the design to achieve the performances and power efficiencies of the M series chips.

Other articles also explain the advantages of compatibility with a preexisting ecosystem of ARM-compatible devices; but, that does not strike me as a primary compelling reason why a major company would care, other than many of Apple's own mobile devices were already ARM architectures? Let's say it makes sense for a laptop and a phone to share a unified processor architecture so they can run the same code--then Apple could have even made their own "Apple Instruction Set" instead?

Is there some kind of technical advantage to the ARM architecture over say, licensing the RISC or the (supposedly aging) x86 architectures? Or is it that there are more ARM architecture engineers out there? Are Instruction Set Architectures so difficult to design, that a special company needs to own and maintain the IP for it?

After reading a bunch of articles I did not feel I actually understood this at all. Many kind of touched on it circumstantially, but I felt they did not directly explain the advantage or rationale for doing so the way Apple did (I thought of the PowerPC but I assume in that case, Apple/IBM/Motorola worked together to specify an architecture). I'd appreciate any insight or pointers to actually good articles on this.
With the exception of a handful of core modules isn’t that exactly what Nextcloud does?
I mean digital - of course you can have a market for physical things.
Fun, all the power to ya on that. I've done a bunch of Kotlin for Android and although I initially didn't like a lot of how it does syntax, it has grown on me a lot. It is definitely a language that is focused on correctness and convenience.

That being said, there isn't too much about Kotlin I miss when I write Typescript in strict mode.

> Unlike typescript, it does not really have a non strict mode (except for the dynamic keyword so you can deal with some js libraries and its weird type system).

Why is the existence of non-strict mode a concern for you if you are using strict mode? After all, whether you are using Typescript or kotlin-js, you are likely to have JS dependencies, and those might not be written with Typescript strict mode. I guess you could just opt not to use any "native" (Javascript) dependencies and just do it all in Kotlin JS, but beyond a certain point that's not very practical.
I see, so the belief is that improved theories of physics will remove all the infinities we appear to see around us?

I guess as religions go, that one is no worse than many, but there isn't really any evidence for it now. Space looks really infinite, the hydrogen atom spectra are very well described by infinite series.
Indeed, as you see on other remarks from me I am aware of it, my point was about the language as designed, not the implementations ecosystem.

TinyGo also doesn't do them.
How would the employer know?