skysight-inc/HackerNews huggingface dataset:
If the distributor (Google) has the signing keys, why not just... not sign it? What does signing give you that TLS doesn't? Why can't Google sign the app with its own keys without the author having a say?

The entire point of signatures is that users can trust their download is what the author published because they're the only one who could produce that signature.
Is there some way to build a

cargo vendor --aggressive

which might prune all the code from your deps that is "dead" to your crate? Would it make the "review your deps" problem more tractable? This is a tangent to the article, but related in that ultimately we're responsible for our choice of dependencies and all that entails. It seems like there might be room for tooling to help us better take responsibility for what actually gets compiled into our crates.
I grew up very poor in the USA (in a housing project). I ended up becoming successful/wealthy by most people's yardstick, but it took a long time for me to grow out of the poor mindset.

For the longest time I never bought anything for myself. I had half a million in income and wouldn't even buy a snack or anything because it felt "wrong" the same way I couldn't justify it when I was a kid.

Before I was married I didn't even own a bed (I coded on a lawn chair in my apartment and used a cardboard box for my table. I didn't own a TV, car, etc.

Even though I build things for my livelihood, I couldn't justify buying a new machine, etc.

I started to come out of that mindset after getting married. I enjoyed buying things for others (my spouse, then my kids). My spouse then urged (forced) me to buy things for myself. Come to think of it, maybe I never grew out of that mindset. If I wasn't married I would still be living that way. The only reason I'm not is because my wife urges (forces) me not to.

Err, get married?
In Philly, they sacrificed some of the road underneath it and narrowed the traffic lanes over the bridge to enable a very quick, albeit temporary repair. There’s no such option for a span of this length over a river — this is a decade long project that could potentially be sped up to be a years long one.
So this detail… that is where my misconception arose. Thanks!
Show HN: An infinite playlist of old video game ads
I wanted a way to watch a bunch of old video game ads and share cool ones with my friends so I made this. Check out https://ads.vgmusic.fm/full for a ui-less experience
You don’t compile the Rust standard library from source, you link against a pre-built one. There is an unstable option to compile the standard library from source.

That said, you’re right that “to keep binary size down” isn’t why the standard library is small. Heck, that you don’t compile from source means sometimes binaries are larger than they have to be, even with LTO! It is largely because anything that’s there has to be supported exactly as is forever, interface wise, and for many things, we did not have the confidence on what the right interface would be. Furthermore, it’s harder to maintain the standard library than it is a package out of tree for a variety of reasons.
I really dislike how much people have been anthropomorphizing AI tools, like these things are just pumping out content by themselves.
1) 3rd party service (Verifier) receives government documentation proving that the owner of {{account ID}} is over the age of 21.

2) Verifier records the fact that the owner of {{account ID}} has proven they are of the age of majority. They throw away all other identifying information, including their exact age.

3) The individual logs in to Verifier from Social Media. Verifier certifies to Social Media that the individual is over the age of majority.

There's no technical barrier preventing this outcome, and if you read the text of the law this is very clearly what the legislature envisions. Will it work? I don't know. Let's wait and see.
I think pretty much 100% of companies just use the online portals provided by the tax software vendors. Companies without direct access to the internet just file their VAT via their accountant, or manually file them through physical mail.
At the end of the day its still cheaper to spray pesticide so thats what the farmer will do, unless regulated.
Now I just google the article title. It's incredibly rare that I can't read about it elsewhere or that I still care about the content if inconvenient. i.e. I don't even want to pay the effort to read it or subject myself to circumvention.

Same with ad-block detectors: ok, bye. But if a specific site says they don't use (subjectively bad) ad networks and have user-respecting advertising, I'll disable the blocker for the site.
There are various contexts where the inputs are defined to be UTF-8 and nonconforming inputs are rejected. For example, a `string` field in a protocol buffer.
tv, computer, radio, social media, and more broadly the internet, are mediums of communication and distribution. what tv content/substance did you grow up with? is that in and way comparable to the content/substance kids these days grow up with? the ban is on the medium but the import is on the content. too much junk on the internet these days. it doesn’t help that (1) they’re way cheaper to produce, and unfortunately (2) highly rewarded (by the platform owners) for their ability to keep users glued.

until it’s possible to have strong and reliable filters, the only way to protect tender minds is through controlled exposure.
Suspicious NuGet Package Harvesting Information from Industrial Systems
Sometimes I ask myself if WALLE is not that unrealistic of an dystopy, as we can already see that people are worse at remembering numbers in contrast to the time before smartphones, that save this information for you. Right now you can let ChatGPT do your homework without knowing anything about the subject. Where does this stop? Are we steering for a future where machines are doing everything for us and we will become dumber and dumber?
Similar to how on Windows you sign both the installer and each binary that will be installed. In that setup it's trivial to have the binaries signed by one party, and the installer by another party.
Scientists do not "need experimentation to come up with anything new". The scientific method is explicitly starting with a hypothesis (i.e. something new), then experimenting to validate that hypothesis.

Are these hypotheses frequently based on prior observations? Of course.

But, reason is still being applied, so I don't know what you're trying to differentiate. You say alphago discovered move 37 from its self-play experience, but that explicitly has nothing to do with the environment. It's the equivalent of a human thinking through various scenarios (without experimentation or interacting with the environment) to come to a new conclusion. The environment is not required for that, which completely argues against what you seem to be saying.

BTW, I have not made any statements about AI and reasoning, other than LLMs. AlphaGo, of course, is not LLM-based.

Of course we don't all live in individual voids, so much of what we are concerned about are functions of our environments and will be expressed as such. I don't think there's anything groundbreaking in observing that a lot of our reasoning is applied to solving problems that have some intersection with our shared reality.
> Now the question is, will I ever get any updates to Photo/Design/Publisher?

They answered the question in their FAQ:

> Will my Affinity apps still get updates?

> Yes! We have many free updates planned for V2, with a continued focus on improvements and the features you ask for.
> This said, the alternative is that they go full-paywall (and risk death, when less than 1% of readers will actually bother to sign up).

Good. They'll be replaced with others that can either provide enough value that people don't mind paying for them or can reduce their costs to survive without tracking like they did before the Internet. Win/win either way.
Here's a thought experiment:

Ebola is extremely deadly - deadly things are bad, we want to either treat, or eradicate Ebola. However, one of the reasons why we haven't all died from Ebola is the fact that it's so deadly. Deadly viruses don't reproduce and spread as efficiently as less deadly viruses. There are a few reasons for this, but one reason is that with Ebola you know you're sick, you can't physically move around, and you can't really shed virus before you're symptomatic.

If we treat Ebola to the point of it being attenuated, but not eradicated, could we wind up in a situation where it actually spreads more easily because of the treatment? People might feel on the mend, but still be shedding virus, and go out to public places and spread the disease.

Note: I'm not saying this for sure would happen, and that it's a reason not to treat Ebola, I'm just wondering out loud if that would be a factor.
I'm guessing you write this because Lewis "is known for his nonfiction work, particularly his coverage of financial crises and behavioral finance." (Wikipedia) How do you think Lewis would frame up the conversation? Where would he take it? I see much low-hanging fruit; the article linked above isn't exactly lengthy nor rigorous. Detailed analysis of supply chain security probably should include the temporal dynamics; e.g. factoring in automated tooling as well as herd mentality.
Updated the URL!
There seems to be newer players both open source and commercial now. But a lot of the focus seems in metric and specially distributed traces. Does anyone in the open source do code level profiling (cpu, allocation, locks etc.) preferably sampling profiler (including Java)?

I have only really found pyroscope.
Pretty much all the regexen I have written have been predicated on start / end of string (i typically feed lines through the regex) … so picking single ^ and $ for the whole string maintains a degree of backward compatibility (assuming that I am normal)
>When you are poor you spend the majority of your brain cycles dealing with your situation.

I call it "Poor Brain/Rich Brain", and neither requires you to be rich or poor, although they are heavily correlated. A Poor Brain person will always take the immediate reward, even if it's not crucial to their survival. They fail the marshmallow test [0]. Rich Brain people will weigh the immediate reward against future opportunities, even if the immediate reward would significantly enhance their life, and the future opportunity is vague and undefined. It's about understanding that how you are perceived in certain situations can far outweigh your own ability to change your circumstances.

[0] https://en.wikipedia.org/wiki/Stanford_marshmallow_experimen...
I’m not an expert either, but the I think the experts are not really very useful in this context.

At least, I typically see things about the trade off between usability and security and the need to enable certain use-cases. I think most security experts work in industry where their job is to figure out what can be done to patch things up within the constraint that their job doesn’t exist unless the company can do the stuff it needs to do to stay in business.

I don't really care about any of that, I just want to be able to read text from the internet without my system getting messed up. It is a much easier use-case, because static content is usually pretty safe (although I do think there have been vulnerabilities in font and image rendering libraries). We don’t need an expert to intelligently analyze things and balance against the interests of competing parties because there’s no need to push in the “open things up” direction for the most part.
My entire exoerience with software development has been me bellyaching about how stupidly things are setup, why dont we do it this way instead etc... only to actually set about working on fixing these things and reqlizing its either way harder than I thought, it makes more sense than I thought, or it just plumb isnt worth the effort.

The evervescent suggestions of a brighter more logical, even obvious, solutions, is often a clear indicator of domain inexperience or ignorance.
And 40 years ago kids were watching bootleg copies of Faces of Death. Yes, kids get to that stuff. The problem is FoD doesn't even hold a candle to the manipulative shit that social media does to kids.
Grady Hillhouse of Practical Engineering recently did a great demo of this. He was able to pull his car in neutral and an empty train car on rails with roughly the same force.

https://www.youtube.com/watch?v=nGhBHrr5CYQ
I've only been a private individual and an auto-entrepreneur (mini-company) in France, but as far as I know everything is fully digital on publicly available websites that anyone can create an account on and submit the necessary information.
No, your point is perfectly clear. Some people have taken to replying "What is your point" as if it were a Jedi mind trick, as if by saying that they could make everyone else not see your point.

Sometimes someone really didn't have a point, or stated it badly enough that it's not very clear. But more often, "What's your point?" is being used as a cheap rhetorical trick, to try to make everyone else not see the point that is being made, because the one who says "What's your point?" very much doesn't want anyone to see the point, or to acknowledge it as an actual point with any validity.

Take comfort when you get asked that. You've made a point that they have no real response to, so all they can do is ineffectively try to get everyone else to ignore it.

Now in this case, they did go one step further. They said that statistics disprove your anecdata. That's at least a bit of a rebuttal. But they didn't actually cite any statistics, so it's just this unsupported claim.
Looks nice! I would suggest to pointing users to a small demo csv file and query that can be quickly loaded/pasted to see it working. Or even have a "Load example CSV and query" button.
thats the maximum. its highly unlikely they will start there, just as they havent with major GDPR violations.
I've never used a filesystem which doesn't remove trailing spaces from file names. Try it.
My first impression is positive. I will keep using it.
Heh, fair. I should see if that does any better.
A fairly basic version of anonymous verification would be that local stores sell an age token. You show them your ID, like you would for buying alcohol, and they give you the token which could then be used with online services to prove you're over a certain age.

It only becomes a problem if stores are forced to store the ID and link it to the token in some way.
According to the article, the bill requires social media platforms ban accounts belonging to underage users and delete “personal information collected from terminated accounts”.

I’m no lawyer and haven’t read the actual text, but if you have a platform where there are no accounts and everyone posts anonymously or under a pseudonym, like 4chan, it completely sidesteps this.
Actually, this is not correct at present. Compiling the stdlib as part of building a project is only supported as a special option in nightly rust.
> My understanding is that Google really wants to manage your keys so that you can't really mess up.

Instead, Google can really mess up. Which they will do somewhat less often than your average app developer, but when they do do it, it will break everything.

> I'd love to be corrected, as there might be some key rotation procedure in place that I'm unaware of. In any case, even if you owned the signing key, no one could theoretically stop Google from providing an APK signed with another key to the PlayStore users, [...]

Only on new installs, which is a much smaller window than being able to change the app on every update.

"Google" in the large, of course, also has a lot of paths to modify the OS and everything that's validating the signatures... but that's a different part of Google, and that risk does not justify this one.
Ask HN: Anyone had a successful Product Hunt launch? Tell us the story
Am launching something on Product Hunt tomorrow. Have put a couple of products on there before, but this is my first time launching something that I'm working on full-time.

Would be cool to hear some success stories, or any tips/tricks that worked for you.
https://twitter.com/ChaudharyParvez/status/17725385394958090...

Posted video of power loss. Also black smoke coming out rear — is that normal? Any clue of what onboard crisis they were dealing with?
it is rumoured Flash Crabs will be out in the fall
"The Race for a New Game Machine" is an interesting book on the development of Cell, if the author comes off a little annoying at times. It was a neat idea to offload certain operations to the SPEs (glorified vector processors) but they all had their own RAM and communicated via a bus, so you really needed to optimize for it.
Why don't you tell me why you think I'm wrong.
It was a good idea to put a yellow balloon as the main subject and make it the only colored bit of the video, so that the eye focuses on it and not on the horribly deformed backgrounds that violate Euclidean space in just so many ways.
There’s some survivorship bias here. Not everyone who was exposed to disturbing content is unaffected or can move past it so easily. And in 2024, it’s far more likely to encounter something you had no intention of seeing.

It’s worth thinking about the social climate right now as the long tail of the last 25-30 years of technology advancement. Mass shootings are so common now they often don’t even register on people’s radar.

These effects are so complex that we’re still trying to figure out how to measure them, but we should take seriously the power and danger of the instant wide distribution of the worst elements of humanity.

I grew up on the old Internet, and made some of my most important friendships using it. It shaped who I am today, mostly for the better. But I don’t think we can let nostalgia or even the many benefits blind us to what the Internet has become or the real harms that come along with those benefits.
“Thank you, EU”…
Stand.earth lawsuit: FortisBC greenwashing deceives consumers
nbdev is a mixture of Quarto and Jupyter and targets the exact use case you're talking about. https://nbdev.fast.ai/
It makes no sense to make green hydrogen when (1) natural gas is still allowed to be burned directly, and (2) gray hydrogen from SMR of natural gas has no CO2 tax.

This doesn't mean green hydrogen can't work, any more than the large amount of local air pollution before the passage of the Clean Air Act meant air pollution was impossible to control. It's just a matter of making fossil fuel users fully pay for the externalities they impose on others.
Just updated the link. I will check out Whitelands; I just saw Slowdive in November, they had Drab Majesty open for them in Canada.
Up next: The Automated YouTube
For sure not. Visual AI is taking over now (because it scales easily), robots already did so.
Most noble marriages in Europe were done for political reasons. Why marry for love (or genetic traits) when you can marry to inherit the Duchess of Burgundy's land?
> ...we were familiar with a type of tool called "semantic layers." Think of them like an ORM for analytics. Basically, they sit between databases (or data warehouses) and data consumers (data viz tools like Tableau or APIs) and map real-world concepts (entities like "customers" and metrics like "sales") to database tables

Then, frankly, your data warehouse design sucks. (Like, bowling balls through a garden hose.) The whole point of data warehouses is that the fact and dimension semantics are mapped to real-world business concepts in the first place.

And yeah, don't you know anything about software development -- how the heck could you think the name "Delphi" wasn't in use already?
> I wouldn't be surprised if there are actual written down criteria for std inclusion somewhere.

I’m not aware of the current state, but in the old days, it was roughly:

1. Is this useful in virtually every Rust program?

2. Is this something (data structures, mostly) that requires a lot of unsafe to implement?

3. Is this a vocabulary type?

Any of these is a slam dunk, anything else is more subjective.
Residential demand response and dynamic electricity contracts with hourly prices
I keep Adobe products only on iPad or iPhone, where the app seems sandboxed. In Mac/Windows, Adobe CC (or any product line FWIW) spawns files and folders like cancer in /Library or /System. It's just hallmark bad software engineering.
Spain is a lost cause in so many regards...
I've wondered this. For the apps I deal with, switching to AABs offered no benefit to anybody and a number of drawbacks to us.

My usual theory about stuff coming out of Google is that there's a big incentive for changing stuff just to change stuff. Android seems to have become about as bad as JS is when it comes to the old "OK, let's try to get this 3-year-old app building with today's tooling" nightmare.
They're storing UFOs in Guantanamo Bay now?
It's not really a free speech question here. For instance, what a student can say in a public school (government tax payer funded) can be restricted to a point, but the courts have ruled that the 1st amendment still protects kids up to a point here. In a private school there are no such protections.

The law here is saying that social media companies are private companies and in order to do business with children they need to follow certain regulations now. This is perfectly normal and legal. For instance, a tavern has certain regulations regarding minors entry to them. There are many examples.
This is about PAYE, not VAT, but I believe with VAT, there is no longer a physical mail option. All VAT must now be filed digitally in the UK (see Making Tax Digital).
Wow, you are right. The first sentence of the abstract of Lesk & Schmidt's paper:

"Lex helps write programs whose control flow is directed by instances of regular expressions in the input stream."

Exactly what I was talking about. There's no reason to suck at state management, guys....
Interesting, I'd heard of buck and classified it as a blaze/bazel clone made by Xooglers who ended up at Facebook. But didn't realize buck2 was written in Rust.

One of the specific weaknesses I found with Bazel for embedded development was support for multiple toolchains was really not great. I'm sure it's improved, but I found the gn/ninja combination much better.
Which bits are true?
> When people say "the brain is still developing until you're 25" it means "your brain is noticeably worse at learning after the age of 25".

No, it means that your prefrontal cortex—which is involved in a wide range of higher-order cognitive functions (planning, decision making, working memory, personality expression, moderating social behavior, risk processing)—is still developing, so until it does fully develop (colloquially at age 25, but it can vary per individual), you may lack those skills because you physically lack the plumbing for them to be present:

* https://en.wikipedia.org/wiki/Prefrontal_cortex

* https://www.urmc.rochester.edu/encyclopedia/content.aspx?Con...

> They also found important clues to brain function. For instance, a 2016 study found that when faced with negative emotion, 18- to 21-year-olds had brain activity in the prefrontal cortices that looked more like that of younger teenagers than that of people over 21. Alexandra Cohen, the lead author of that study and now a neuroscientist at Emory University, said the scientific consensus is that brain development continues into people’s 20s.

* https://slate.com/technology/2022/11/brain-development-25-ye...

Of course even post-"25" some folks still may lack them as well, but at that point there's no longer anything physically preventing you from doing so.
Fair enough. The context is that years ago, my team was evaluating Go and Node.js as options for a server requiring concurrency, and back then Node.js didn't provide any stacktrace for async callbacks. I know it has been improved since then, but I don't use Node.js.

What do you miss in Go's stack traces?