skysight-inc/HackerNews huggingface dataset:
The RCU use case is convincing, but my experience with GCs in other situations has been poor.
To me, this reads more like an argument for bespoke memory management solutions being able to yield the best performance (I agree!), which is a totally different case from the more general static lifetimes generally outperforming dynamic lifetimes (especially when a tracing step is needed to determine liveness).

> Lies people believe... Calling free() gives the memory back to the OS.

I believe calling `free()` gives the memory back to the allocator, which is much better than giving it to the OS; syscalls are slow.
Perhaps not immediately; mimalloc only makes frees available to future `malloc`s periodically.

Trying a simple benchmark where I allocate and then immediately `free` 800 bytes, 1 million times, and counting the number of unique pointers I get:
glibc's malloc: 1
jemalloc: 1
mimalloc: 4
Julia's garbage collector: 62767

62767, at about 48 MiB, isn't that bad, but it still blows out my computer's L3 cache.
Using a GC basically guarantees every new allocation is from RAM, rather than cache. This kills performance of any heavily allocating code; we don't care only about how fast memory management can work, but how quickly we can worth with what it gives us.
I gave a benchmark in Julia showcasing this: https://discourse.julialang.org/t/blog-post-rust-vs-julia-in...

Malloc/free gives you a chance at staying hot, if your actual working memory is small enough.

Allocators like mimalloc are also designed (like the compacting GC) to have successive allocations be close together. The 4 unique pointers I got from mimalloc were 896 bytes apart.

My opinions might be less sour if I had more experience with compacting GCs, but I think GCs are just a vastly more complicated solution to the problem of safe memory management than something like Rust's borrow checker.
Given that the complexity is foisted on the compiler and runtime developers, that's normally not so bad for users, and an acceptable tradeoff when writing code that isn't performance sensitive.
Similarly, RAII with static lifetimes is also a reasonable tradeoff for code not important enough for more bespoke approaches.
The articles example is evidently one of those deserving a more bespoke solution.
"we make something worth buying." That is interesting. The "buying" ostensibly refers to journalism, which is where IMO the media has failed terribly in the past 2-3 decades. Most of it became too opinionated that the product being sold was no longer news and analysis, but opinions and echo chambers. I think over time people got tired of paying for opinions, but others were content to continue to do so.

A newspaper that read more like analytical research would be more appealing. The media would benefit as a whole, and prosper, if they strove to remove the personal opinions and beliefs from their reporting.
Windows might also be affected: they just expanded built-in explorer archive format support with libarchive, which depends on one of affected libraries AFAIU: https://news.ycombinator.com/item?id=36052169
> Surprisingly, many images support ARM!

My darwin-aarch64 isn't surprised at all ;)

I did check OnePlus6T and it seems that its Kryo processor is ARM64, and not ARM8 (which I suppose would have smaller coverage).

Now my inner child screams to get a desktop nano linux on desk in form of a phone and run Emacs of it. Not necessarily old one. Any recommendations?
In the Bazel build system, you would mark the test data blob as testonly=1. Then the build system guarantees that the blob can only be used in tests.

This incident shows that killing the autoconf goop is long overdue.
I lean (non-American) left and read the Atlantic with some of the same criticism, but really enjoy delayed gratification for this. Only two paper periodicals that have stayed constantly subscribed to for years. The guardian weekly is good too. Thanks for the suggestions!
I guess you increase the cost of your setup by adding an intermittent power switch / timer that turns charger power on and off. With MQTT, the server itself could drive the switch, and turn the charger on when the battery is low enough, turn it off when full enough.
It's three people. The guy on the right is leaning over another one under the water. It's probably a picture from a flood training simulator.

Edit: https://commons.wikimedia.org/wiki/File:US_Navy_040308-N-000...

The picture was uploaded in 2009. Downvote if you want, but there is no AI at work here.
You can find it on archive. Someone archived it last night
Phones that can have their battery removed tend to work fine plugged in with their battery removed, so that's an option. Also a good reason to make sure you don't buy a device that you can't open. I made that mistake with my current phone, and I definitely won't be making that mistake again if I get another smart phone.
But "attracting young audiences" is growth in the number of subscriptions.

I think you're right; jacking up prices on your existing subscribers can raise revenue, but if it means you never get any new subscribers, your company is even more doomed than it used to be.
From the comments on that Xit it appears that the sensor doesn't go all the way up to the top.
A friend of mine used to work at a startup which ran part of their (user-facing) solution on a plain Windows desktop without power saving. I don't think the PC itself was exposed to the Internet, but it was used as a server to support a production, customer-facing platform.

It's pretty weird but, hey, "if it works don't touch it", I guess...
What would happen if you yanked the ethernet cord after 2Mb transferred? Same thing. You can't precalculate the size since resources are added dynamically (and you can't trust HEAD anyway).
Just remember we have been running web sites for past 30 years. Actual computing power to serve something static is minimal in current day.
I brought it into an aging ~12-year-old system to add a bit of SPA-like functionality to some pages. It works wonderfully with those classic MVC-style web sites.

I can highly recommend it for giving older, jQuery-era sites a new lease of life. I dropped in the CDN built into the view files, tweaked some of the controllers to return content outside of their usual template layouts based on a hx-request header, and I was away.

Didn't have to mess with bundlers and compilers. It was refreshing!
on the fault tolerance side - if it's really this fast why not just store the data in a high-availability database / data lake then run batch processing? it doesn't seem like this use case requires real-time indexing and searching (which may be why elastic is slower as it supports it)
McDonald's CEO made $17.8 million in cash/stock/options in 2022, so working at McDonalds must be a good gig. If entry-level workers made 1/100th what the CEO makes, that's $178,000 a year!
OpenAI says in their terms that you can't "use output from the Services to develop models that compete with OpenAI" [0], and it seems that people are interpreting it as training a model that directly competes with them, which we aren't doing. There are many companies out there built on using GPT-4 outputs to do task-specific fine-tuning, so it doesn't seem like it's a problem unless we were trying to make competing foundational model from GPT outputs.

(I'm not a lawyer, so this needs to be taken with a large grain of salt)

0: https://openai.com/policies/terms-of-use
Yes, the barrier is high because paying is a high-friction activity whenever cards are involved. That's why the various quick checkouts are all the rage the past 10 years or so.

This has very little to do with the original claim of "Users dislike paying on the web because it is a security risk". Users have no issues paying for stuff online.
Considering that you suggest managed services, what’s a good version of the cloudflare tunnels and access, with the same features except that it does not terminate the TLS?
> Postgres is enterprise level (whatever that means). Blazingly fast, Web 3, cloud-native, etc etc, pick your own buzzwords

it has issues in several choke points: HA setup is complicated, it doesn't utilize multi-core machines well on heavy queries.
If you are looking for nice Windows-only open source photo editor with lots of Paint and Photoshop-like features, I recommend PhotoDemon:

https://photodemon.org/
As somebody old enough to a.) have used svn, and b.) only fully migrated everything to git in 2010:

Subversion:CVS was like NVMe-SSD:HDD, and Subversion:Perforce was like SATA-SSD:HDD.

Git:Subversion is more like RTX2080:RTX3080, or, say, '78 Datsun 2080Z:'93 Acura Integra.

BETTER, yes, sure, yes.

OMFGIGOTTASWITCHNOW!!!!, not really.
Getting a TS equivalent is exactly what helps minimize them chances that someone is compromised. Ideally, such an investigation would be transferable between jobs/projects, like normal TS clearance is. If someone is caught, yes rolling back years isn't practical, but we probably ought to look very closely at what they've done, like is probably being done with xz.
A fictitious corporate person expressed fictitious human emotions over the fictitious mortal danger that imperilled a fictitious dog.

Reading this article has ruined my suspension of disbelief in The Guardian.
https://archive.ph/r90Uf
Good point, but many of the me-too drugs are chemically close enough to the original to cross-react. (And in some cases are actually identical--a company finds a compound the body will convert into the original drug.)
Is this the new frontier of HN? Posting email addresses to start conversations?
> enterprise level (whatever that means)

It means "non-technical executives/managers recognize the name and will approve its use". Like Oracle.
sshd starts with root privileges and then proceeds to, in summary:[1]

1. Parse command line arguments

2. Setup logging

3. Load configuration files

4. Load keys/certificates into memory (notably including private keys)

5. Listen on a socket/port for incoming connections

6. Spawn a child process with reduced permissions (on Linux, using seccomp filters [2]) to respond to each incoming connection request

This backdoor executes at order 0 before sshd's main function is invoked, overwriting internal sshd functions with compromised ones. As some ideas of what the backdoor could achieve:

1. Leak server private keys during handshakes with users (including unauthenticated users) allowing the keys to be passively stolen

2. Accept backdoor keys as legitimate credentials

3. Compromise random number generation to disable perfect forward secrecy

4. Execute code on the host (supplied remotely by a malicious user) with the 'root' permissions available to sshd upon launch. On most Linux distributions, systemd-analyze security sshd.service will give a woeful score of 9.6/10 (10 being the worst).[3] There is essentially NO sandboxing used because an assumption is made that you'd want to login as root with sshd (or sudo/su to root) and thus would not want to be restricted in what filesystem paths and system calls your remote shell can then invoke.

The same attacker has also added code to Linux kernel build scripts which causes xz to be executed (xz at this point has a backdoor compiled into it) during the build of the Linux kernel where xz compression is used for the resulting image. Using this approach, the attacker can selectively choose to modify certain (or all) Linux kernel builds to do some very nasty things:

1. Leak Wireguard keys allowing them to be passively intercepted.

2. Compromise random number generation, meaning keys may be generated with minimal entropy (see Debian certificate problem from a few years ago).

3. Write LUKS master keys (keys used by dm-crypt for actually decrypting disks) to disks in retrievable format.

4, Introduce remote root code execution vulnerabilities into basic networking features such as TCP/IP code paths.

[1] 'main' function: https://anongit.mindrot.org/openssh.git/tree/sshd.c

[2] https://anongit.mindrot.org/openssh.git/tree/sandbox-seccomp...

[3] https://github.com/gentoo/gentoo/blob/HEAD/net-misc/openssh/...
Have not the wealthy always owned large parts of the media?

https://www.nytimes.com/2012/04/09/business/media/the-return...
Thanks for the reply. I’m quite familiar with subchannel quant, but still feel like my questions did not get addressed.

1 Could you post the full memory use of the methods? E.g. you include quip metadata in its GB but not hqq metadata in its GB.

2 If you have to go to cpu to shift and scale, how did you get latency lower than pure on device? Was this bsz1? No speculative decoding?

3 how can lora absorb shifts with only increasing rank by 1 if you have a shift per group?
The market GitHub created was Social Coding and the idea that there were network effects to be gained by having all OSS in one place. This is the same thing that makes it difficult today for OSS projects to move off GitHub. If anything, GitHub deemphasized the "D" in DVCS.

My point, since you replied to my post, was simply that prior to GitHub, none of the other sites for OSS were trying to achieve the same goal. The goal was to establish a specific OSS community for a set of projects. SourceForge was a bit of an outlier in that a lot of projects used their distribution network, if they were not part of a foundation like Apache or Eclipse that had extensive mirrors setup.

SourceForge was never the main development and collaboration site for any of the major efforts happening around OSS.
If you compile it to a static site with something like Jekyll, I expect an old phone could handle pretty much any single blog in the world. And of course if you ever reach astronomical traffic, you can always add a CDN.
- * _ring ring_ *
- "Hello?"
- "It's Lasse Collin."
- "Why are you collin me? Why not just use the backdoor?"
This sounds an awful lot like analysis paralysis to me. My recommendation: just launch. You probably won’t run into any of the problems you’re worried about and, if you do, you can just patch them up.

As you launch more and spend more time dealing with users the default things to do will become second nature, and you’ll find yourself using the built in tools from AWS, DigitalOcean, CloudFlare, etc. rather than rolling them yourself.

But seriously, just launch. There’s a really good chance you won’t have any problems.
It just struck me how much more capable than a raspberry pi this is as well, if you don't need the screen or pins that is.
AT&T Says Data from 73M Accounts Leaked on Dark Web
> extract more money from their existing pool of committed subscribers.

This is something a lot of companies are learning. A lot of your current customers will pay a ton more, so better to dump the less committed customers and focus on the willing to pay niche.

Explains the decline of customer service in many ways. Unless you pay a lot of money, you probably are not worth serving well, as you weren't committed to the product in the first place.
Debian is considering that their infrastructure may be compromised[1].

[1] https://fulda.social/@Ganneff/112184975950858403
sourceforge was like a big klunky 8-track tape player of open source hosting. it was awful, and it's all there was. literally anything that people put up and managed to publicize a bit would have replaced it.

a more interesting question is why did Github win out over Bitbucket (I know the answer to this also, it begins with Mercurial and ends with "Atlassian buys them", but in the middle it gets into interesting questions about source control systems, issue trackers, etc).
> * If you're using JWTs anywhere, don't mistake them for encryption - they are not.

I would love to understand the assumptions that lead to this belief. It makes negative sense?
Gradient-directed evolutionary algorithm sounds kinda interesting.
It’s not attractive women but pornography. Nobody would care if this was a picture a computer scientist had taken of herself at work because they needed a test image, it’s the “produced for the sexual pleasure of male viewers” part that makes some people worry that their colleagues view them the same way.
Move fast and break things.
Move fast and blow up rockets.
Move fast and chop off bits.
SourceForge, Slashdot and Freshmeat all seemed to go downhill hand-in-hand to me. Bought and monetized and sold and bought and sold and monetized.
Well heavy motors actually do stop easily, but issue is just that detecting when to stop becomes harder. It is something that can be solved by measuring more precisely or adding extra sensors, but somewhere costs were cut and some part of the stack wasn't implemented. Worst case it is hardware side and cannot be fixed by firmware update
From your ML summary:

> The suit references forthcoming research indicating that PFAS (polyfluoroalkyl substances) may leach from HDPE plastic containers into everyday products.

From the article:

> A peer-reviewed study in 2011 found Inhance’s containers leached the toxic compounds into their contents.

This is why people trusting ML rewrites is sad. Obviously this seems less cut and dried if you hallucinate new “facts”

The final paragraph is even more error riddled. Check the actual article content:

> Since 2020, Inhance appears to have repeatedly lied to regulators and customers about whether PFAS leached from its containers, and for several years resisted EPA’s demands to submit its process for review.

If you think reading this rewrite is a good use of time, you’re wrong.

Please don’t post lies that a computer told you because you like them more than journalism.
>>"... if you set up perfect conditions"

>"I didn't cherry-pick..."
It's not just Hacker News, it's all over the place. The term has lost all meaning and basically just means someone that's making a mistake or does something the writer disagrees with.

I see it all over social media where before it would've been "10 pitfalls of X", it's "10 mistakes Junior devs make when learning X". Or if somebody disagrees with someone else about technological discussion, the goto insult is that the other person is a junior dev, instead of maybe thinking that other people have different perspectives.
Are there smart phone with removable batteries nowadays?
This skirts around the edge of an observation which I want to dive into, which is that modern user OSes (anything which isn't a specialized RTOS) has built-in garbage collection. We just don't call it that: we just call it memory management. What do we call languages with a built in GC? Memory-managed languages!

You see this in a lot of older "top-to-bottom" C programs: they allocate, they clean up system resources (using longjmp to one label), but they don't bother with free. When the program exits the OS gets all that memory back anyway, so why bother?

There's a missed opportunity here, to have an OS with a garbage collector with less isolation from programs, one which handles resources more like a language's runtime GC. It will probably stay missed, because in the typical GCed language, the GC is intricately built into practically every line of the runtime, so it's not really practical to make a distribution of that language for one OS which hands that control over to the operating system.

But it's a pity, because there's a lot of room to improve some of the chronic problems we see from this artificial isolation of program-level memory management from OS level.
From what I've seen in YouTube reviews, it's the sensor.

The other, though likely more expensive place where pennies were pinched, is the lack of video on the rear-view mirror. Instead the rear-view camera is shown on the main display when shifted into reverse. The physical mirror itself is blocked by the tonneau cover. Personally, I enjoy the situational awareness of always being able to use the rear-view mirror, even when moving forward.

Both of these things feel inappropriate in a $100,000 vehicle in 2024.
Android supports Ethernet over USB-C, but a quick Google search seems to suggest that performance is lacking. I found this odyssey of some developer trying to reach someone at Google to get it fixed, but they keep giving him the ol' runaround. Works fine on Apple devices though.

* https://support.google.com/android/thread/251842240/ethernet...

* https://support.google.com/googleplay/android-developer/thre...

* https://issuetracker.google.com/issues/319406707
You have a funny definition of easily. The impact force has been estimated as between 120MN and 230MN. I doubt there exist many bridges that can take that hit. The kind of ship impact protection that bridges usually have are not built to take a 150000t ship at 8kn.
Also the “please wait x seconds before download” while they advertise some other stuff.
Recently, I learned that PostgreSQL can integrate with many languages through plugins, such as PL/Python, pgrx (Rust), pgzx (Zig), and so on. I wonder if anyone is planning to write one for Java or C#, lol.
Other brands don't seem to have this problem even though they also have heavy hatches? And in the video with the 4 carrots, you can clearly see the hatch stopping, yet it keeps powering the motors and eventually cut the carrots. Even a simple current limit cutoff would have prevented this, so either the limit is set way too high or there's no limit at all.
Again, same argument could be used for women to justify abortion bans. If you didn't want to have a baby, shouldn't have had sex. The fact that her right to choose ended at an earlier point despite her body having involvement at a later point does not change that the right exists and was exercised.

To be clear, I don't hold the above position, I just mean that your argument doesn't convince me because it's the same principle applied inconsistently.
So there weren't any usability tests carried out in the development process??? This should be also a planning/management failure.
Thanks! I think I understand where you are coming from. There’s a balance between corporate BS and authenticity, and right now the overall impression you are getting is more weighted towards corporate BS. I built a lot of projects and this is the one is probably the one I was most excited to build. I do travel (probably done more of the “American hot garbage variation of it.”), but I want to travel a lot more. One thing that really excited me about the idea of “open sourcing itineraries” is that it could surface more kinds of trips than your standard cookie cutter ones. It’s an experiment and I appreciate your feedback on this. Thank you.
In that case, that "core" of the population also doesn't need to know about benzene molecules, river erosion processes, history of some ancient kingdom and all the other trivia they load you up with at school. So, to me, it doesn't really follow that the curriculum is designed deliberately to churn out low-to-mid skilled workers. If anything it seems like it was intended to produce people along the road to being relatively highly-skilled people, but the implementation is as if by people who think that advanced skills are just the result of coagulating enough trivia (though I think it's actually an iterated "you get what you measure" outcome, rather than educationalists who actually think that).

Just like sometime who "learns" a language by drilling only vocabulary, this ends up serving no one particularly well - many people who would otherwise end up in trades have few practical skills taught and couldn't care less about benzene. Many people who would end up being PhDs in organic chemistry are bored rigid by the tedium of the process.

As you say, it is a parental responsibility. But the school system has spent decades telling engaged parents that the correct way to fulfill that responsibility to provide rounded education to their children is by sending them to school, and it's becoming clear to some parents that the school system isn't actually upholding that promise.