skysight-inc/HackerNews huggingface dataset:
We never really know how the executives feel about the layoffs behind the scenes. Sure, some are done for greed, but a lot probably do fall into the category of sacrificing the few to save the many. Then there are those in the middle who need to deliver the news, who have to shoulder the burden, but are just doing their job.

I worked with a guy who moved up from an entry level job to director pretty fast. I trained him when he started, and when he made director I was working adjacent to his team, not under him (we had the same boss). The first time he had to lay someone off he asked me if I wanted to go to the bar afterward. It was not a celebration, it was depressed drinking. He occasionally said some things between long stretches of silence. Even though the decision wasn’t his, he felt a heavy burden of responsibility for those people’s lives, he was gutted having to lay someone off, and felt like he failed them… even when there was nothing he could have done, it was how the company operated. He never showed this at work, and always tried to appear objective and detached to some degree, but every layoff was like this, and he felt like I was the only person he could talk to. If I wasn’t there I’m sure he’d just drink alone and spiral as the guilt ate him alive. But to his employees, he was the jerk boss who laid off their co-worker and didn’t care.
The only derangement here is not recognizing the tragicomedy of this entire vehicle’s existence. Now we are seeing the super fans touting plastic wrapping it to prevent rusting. ROFL
> traditional "business logic lives on the backend, the frontend just handles presentation" model

.NET Framework has it's flaws, but the ease of development of ASP.NET WebForms or MVC sites is awesome.

The JS ecosystem, not only is it confusing, all too often documentation, forum posts, etc. out of date making the barrier to entry that much higher.
Not that I'm aware of but any plugin system that expects dynamically linked binaries integrating through C API can be targeted by .NET NativeAOT (e.g. OBS plugins can be written in C# without manually dealing with hosting the runtime).
> a successful turnaround that offers a glimmer of hope for the rest of the industry, which has laid off reams of journalists since the start of the year.

National- and international-focused journalism is relatively healthy. It’s also the least important part of the news media. Doing great? No. Still kickin’? Yes.

2nd-tier and lower city papers, and small town local papers (and tv journalism, too)… those are mostly dead already. Slowly strangled to death by technology, bought by private equity and gutted, or scooped up into giant propagandist media empires that don’t care about local issues and journalism, but about laundering their national agenda through “neutral” local outlets as a kind of astroturfing-adjacent activity.

Those were way more important, they’re already all but extinct, and there doesn’t seem to be a way to reverse the damage.
> I am a power user of all sorts of software that I sorely wish had a less cluttered and “more white space” or “more aesthetic” experience

I would add to this with the observation that the existence of "power users" is very likely a sign that the system is poorly designed.

Obviously some things are just really complex and there is no way around that. But most things are not. A good system will easily and intuitively solve the user's problems without them needing a degree from NASA to understand how to use it.
In the linked ~30 second video clip they do indeed test multiple vehicles, starting about 5 seconds in.
This is a grand vision and diagnosis. It also maintains a studied distance via blanket assertions that are agreeable, and a 100,000 foot view. That makes it hard to discuss directly without seeming disagreeable.

Going with Socratic method:

Did anything else happen the last 2-3 decades? Anything that would cause tree pulp, that could charge for ads and subscribers, and thus afford to pay more and subsidize longer research, less popular?

Or is it just that the media/journalism/etc., these large faceless groups, all just universally started making opinionated content 20-30 years ago?

I'm curious: what did media/journalism looked like 50, 70, 100 years ago. Maybe I could look up newspaper front pages from back then. Was it less opinionated?
LanguageX Is Like LanguageY
Kotlin is like C#
https://ttu.github.io/kotlin-is-like-csharp/

Kotlin is like TypeScript
https://gi-no.github.io/kotlin-is-like-typescript/

JavaScript is like Python
https://codeguppy.com/blog/javascript-is-like-python/

Swift is like Kotlin
https://nilhcem.com/swift-is-like-kotlin/

Swift is like Go
http://repo.tiye.me/jiyinyiyong/swift-is-like-go/

Swift is like Scala
https://leverich.github.io/swiftislikescala/
There a small bit of irony that it required a fully decentralized source control management in order to consolidate the market for OSS code/project hosting. The obvious caveat is that git allows any project to pack up and leave anytime they want, but the vendor lock-in came by means of the network effect and developer preference. There is an incentive on GitHub, at least, to provide a superior product to other alternatives like Gitlab or Bitbucket. Ultimately, it meant the risk of choosing GitHub was very low due to the nonexistent vendor lock-in.

During SourceForge’s decline, most OSS projects were either very prolific, general purpose libraries or full software packages, all of which had most of their infrastructure sorted. There were a number of other platforms, now mostly forgotten, that tried to acquire the displaced market shed from SF’s former userbase.
Almost every one of the new platforms wanted to just be a better SourceForge, but none of them wanted (or thought to) to tackle the problem of git hosting as their primary product they were selling to users - which ultimately proved to be what the market wanted. OSS devs with a project likely already had an issue tracker, website, discussion forums, etc, and they didn’t want to spend their day in a CRUD app manually managing releases and fielding support requests on a platform that different from what they setup already. GitHub offered public git repository hosting with a modern look that was betting on companies buying commercial-oriented features as a monetization strategy, rather than ads. Eventually, a-la-carte features such as issues, discussions, and wiki were added, but were able to be toggled at the project-level.

Meanwhile, SourceForge was too busy cramming more ads in, cluttering layout, trying out asinine social media integrations, and ultimately, accelerating their (at this point) well-deserved) death by packaging malware/adware in software distributions. It was easy to see in the moment (and even more in hindsight) how much of a loser strategy this was for SF. It’s almost comical how spectacularly they fucked up their own market share with short-term thinking and outright stupid ideas. Not much love was lost here by the end.

Without GitHub, npm would not have been successful (which itself inspired other package managers), CI/CD would either be a bigger mess or dominated by a single vendor (which enabled fun stuff like infrastructure-as-code), coding in general would not be as accessible, and git itself may not have won out as heavily as it did.

GitHub’s success is a good case study in a startup being at exactly the right place at the right time, with the right product. The result wasn’t the mass migration of prolific projects immediately moving in, rather it enabled this back-pressure of micro-OSS projects to thrive because now it became viable to build a library that does one thing really well without the admin work of managing a full-blown OSS project. A number of projects eventually moved in, but the driving force to adoption, in my opinion, were the tiniest projects that ultimately proved this platforms viability.
Sure, but a HA database + batch processing solution and a HA Elastic cluster setup are more or less similar in terms of complexity, number of nodes, RTO/RPO concerns,...
Who said "if you set up perfect conditions"?

Why are you trolling me?
Which OS are affected by this compromise??
Is Ubuntu affected?
I did my router and it showed like a thousand CVEs for an out of date dnsmasq but from the few I did randomly look at, they just allow to crash the router so I guess DOS, not RCE or anything.
Even if they have a "real" picture or a credible description that is not good enough. Instead of using an anime character a malicious actor could use an image generator [0], they could generate a few images, obtain something credible to most folks, and use that to get a few fake identities going. Sadly, trusting people to be the real thing and not a fake identity on the Internet is difficult now and it will get worse.

[0] https://thispersondoesnotexist.com
Aseprite is free if you compile it yourself [0], and can still be used for commercial purposes if compiled this way [1]. But I recommend buying it anyway to support the project.

[0]: https://github.com/aseprite/aseprite/

[1]: https://www.aseprite.org/faq/#can-i-sell-graphics-created-wi...
> GC only solves the application memory part, thus doesn't help at all for handling those external resources.

This is far from entirely true. Most languages with a garbage collector have finalizers, which will clean that sort of thing up. Generally, and unlike memory allocation, one can call those finalizers from within user code, so as not to have to rely on the GC running.

The distinction between reference counting and garbage collection is an artificial one. Reference counting is an approach to garbage collection, one with different tradeoffs from more concept-central algorithms for GC. I agree with you that it's a more unified approach to resource management, finalizers require user attention in a way which ordinary allocation doesn't, so yes, system resources get treated differently. I don't see that as a slam-dunk against them, however.
Yup. And it's good. My aspiration, though, it to migrate to https://leanrada.com/htmz/
I recall reading an article about how E. coli or elegans or something has the ability to amplify signals 1000x through nothing than a clever biological configuration. The fact that proteins have “memory” blows my mind. It’s interesting how the macro scale emulates the micro scale.
I have a pipe dream of setting up self-sufficient devices like that, and stowing them on public transport (e.g. buses, trains), and letting them travel around opportunistically connecting to open wifi hotspots.

If you have enough of them, and if you have clever enough software, you can be reasonably confident that at least one "server" will be up at any given time.
You should have some basis for skepticism, especially in light of all the research which was done for this article.
Countering Trusting Trust Through Diverse Double-Compiling [pdf]
My pet peeve: people saying every previous moral panic was unjustified because "after all, our generation turned out alright!"

But your generation didn't. 70 years of television destroyed the minds of the boomer generation and is responsible for a lot of today's ills, as traditional culture was replaced with manufactured content pumped out for the sole purpose of engagement -- much like social media today, but weaker.

We didn't survive TV, we just got used to and normalized it.

Same thing is happening with smartphones and addictive feeds now.

Some of the same people who say TV clearly didn't hurt us and is normal and OK, are the same who skewer the boomer generation. Don't they ever put two and two together? Of course not, that would take an attention span, which was reduced by TV and is now being finished off by TikTok
What people fail to realize is that the leadership systems of Corporations: Boards of Directors, Executives, Management and HR are all effectively organized against them, to make sure the business gets what it wants as much as possible

When you ask your manager for a raise, they might be your biggest fan and want you to get that raise, but there is a whole system that is going to resist it, because paying you less is better for the company. You're not bargaining with a person you're bargaining with a system. And the system is built in such a way that it is incredibly difficult to persuade at an individual level

Workers can benefit from having their own system inside of the larger corporate system that is working for them, instead of this every man for themselves stuff
Thanks, I appreciate your perspective!
The biggest security hole is user input.

Just escape every input:
For sql, to avoid sql injection:
https://datacadamia.com/data/type/relation/sql/parameter
For html, if somebody try to inject html:
https://datacadamia.com/web/html/entity

You got 99% of security holes patched.

All the best
The article does a good job explaining why GitHub won the developer mindshare, but there was also end user mindshare.

Unlike GitHub, where the source code is front and center, SourceForge always prioritized showing a project introduction page with screenshots and a big download button for the end user. SourceForge is where non-developers went to download cool freeware. It was like F-Droid for Windows. It was meant to be the official website for the projects it hosted, which is why it didn't host forks.

But the market for end users who download executables from random websites has been shrinking rapidly for two decades. Nowadays, either you're a developer and care about the source code, or you're an end user and just want to install that app from your favorite app store. Not to mention that most active open-source projects these days are made for other developers and not end users, so there's no point hosting them on a platform designed for end users.
Do you mean to say that you believe jwt payloads are encrypted? They are most certainly not.
Anthropogenic forcing increased the risk of longer, slower traveling heatwaves
> why not a dedicated database for every customer

Well there's trade-offs with this too, whether needing aggregate data across shards for features, reporting, etc. Shared data between customers, users, etc. API access, etc.
... and Debian is very serious about it: https://fulda.social/@Ganneff/112184975950858403
Figma Plugins
Small Press Economies: A Dialogue
The only "legitimate" use I can think of is making call center AI agents sound like people. And all the other ones involve getting enough of someone's "voiceprint" to impersonate them to get money or ruin reputations.
Every modern backend web programming framework? Frontend requires a lot of flexibility and compromise because the runtime environment is so disparate.

In the backend you choose and control one runtime so the framework can integrate tightly with the authoring workflow.

Concretely, Rails, Django, Spring, Elm, all have great tooling and are much easier to work with than frontend stacks.
I have a modest proposal; fine the shareholders of record for the cleanup costs. If there is the possibility of real consequences for errors, they're going to make sure errors don't happen
Google is indifferent, almost worse than evil - which can be predictable.
Safe cars don't appeal to all the alpha males that the cyber truck is marketed to.
Filing lawsuits is entirely consistent with a position that the courts, not private companies, should regulate speech online.

Then there's Jack Sweeney, the guy tracking Elon and his private jet - who, by the way, was accused of facilitating stalking by Taylor Swift. For him, X made a policy against any account "doxxing real-time location info of anyone".

Does anyone here actually want to argue that tracking real-time location info should be allowed?
(SafeFileHandle is internally reference counted, but yes, worst case when you forget to .Dispose it, it waits in the finalizer queue for the GC to trigger the finalizer thread to process the items in it)
Wouldn't banning the material also lead to market pressure to develop containers that aren't in violation? Why are we ignoring this point?
Another example at Tesla was removing the ultrasonic sensors, which many argued was for margins.[0] This led to existing features like Park Assist, Smart Summon, etc no longer working on new Teslas.[1]

[0] According to Tesla, there were 12 USS sensors on each vehicle. Costs for each sensor appear to be around $50, when purchased on the after-market.

[1] https://www.zdnet.com/article/tesla-removed-its-ultrasonic-s...
I might start calling Twitter "X" once twitter.com redirects to x.com and not the other way around.
And that’s the answer isn’t it? Banks are behind the times in terms of security and tech.
I recall Gitorious, which isn't mentioned in this article. It was acquired by GitLab, which subsequently discontinued it in 2015. The standout feature has always been the social aspect and the ability to attract a large user base to a git forge. If platforms like Codeberg or similar forges enhance their social integration and capabilities, they could eventually become strong competitors to GitHub.
Sorry, I don't know. That's not a use case I'm personally familiar with. Maybe others have ideas?
It’s absolutely not to good to be true, it’s one of the best benefits available to veterans. I actually got paid to close with my VA loan (basically a negative down payment). This was a few years ago so the market was different, but it wasn’t uncommon to request e.g. some percent of the purchase price as seller concessions. If the total down payment is 0, anything over closing costs can get paid out to you.
I preferred when link rot led to a 404 or site not found. I have recently been working with some stuff I wrote ~2004 and so many links are now dead. I've been giving archive.org a real workout.
I use Safari instead of Chrome when I want twice the autonomy, and it's really strict to websites trying to play media without interaction. It doesn't even start loading YouTube videos until I click the giant play button. You never even see that button in Chrome, and I can't believe how much I now miss that basic sanity check. Chrome will even start playing dozens of tabs simultaneously if I open a collection of tabs from Bookmarks. Really think there should be a setting that enforces the requirement of initial interaction before playback on every site in all browsers.
i use it to see .sid images...never found any other way to open those
> You see this in a lot of older "top-to-bottom" C programs: they allocate, they clean up system resources (using longjmp to one label), but they don't bother with free. When the program exits the OS gets all that memory back anyway, so why bother?

You don't need to bother with releasing other types of resources either though (files, sockets, threads, ...), since the operating system will take care of that on process exit (unless you are on AmigaOS). The only reason to free memory is to recycle that memory in other allocations in long running applications without grabbing new memory from the OS. For one-shot command line tools it's usually not needed.
PS

> Repeat current repeatable block once more and exit the block.

All blocks are repeatable, right?

It is once not once more.

And it doesn't exit the block. Execution isn't in the block.

So better is: Repeat the current block once.
USSR was an oligarchy before. Now it is a dictatorship, so operations have a single decision maker. Also, Putin is highly interested in ops which extend his influence and his ability to steal.
It looks like the xz hack riffs on this idea in getting the payload into the final binary, and attempting to hide itself.
I think this is a good point, and also part of the larger trend of Internet activity moving to centralized providers. Users are now habituated to look for an existing platform to host their content, whether that's video (YouTube/Tiktok), blog posts (Medium/Substack), hot takes (X/Threads) or code (Github). It doesn't even occur to most people that there's another way to do it. They see these companies as just part of the public infrastructure of the Internet.
Trump won't protect Elon. BYD is going to build cars in Mexico to take advantage of the USMCA. Stopping that would require Trump admitting one of his greatest accomplishments was flawed.
That's very deluded and short-sighted. More often than not, investors and shareholders hold more weight in large companies than whatever you can bring to the table. Not to mention skills that are rare often don't have huge markets, otherwise there'd be colleges teaching it in a degree and it'd be no more rarer than other skills, don't you think?
Videos from Embedded Linux Conference 2013
Great write up. I read through maybe half of the points and skipped to the end, bookmarked to come back and finish later.

I’d like if the author could elaborate a bit about the types of projects that influenced these guidelines. Roughly what constitutes a “large” project, were the projects open source, private/commercial, or a mix of both, does web/service platform vs. desktop/local platform have an impact on these, etc.
I mean, this class of attack is defeated as a matter of course in high reliability applications like aerospace. You just check the compiler output precisely corresponds to the compiler input. You need to do that anyways to prevent miscompilation errors in general (this class of attack is just intentional miscompilation), so it hardly counts as a nightmarish problem, just a annoying one.
That's not at all a rare special case in most server applications.

One way to see that is to consider how much of a program's working set is in threads' stacks vs the heap. If the most of the working set is in the heap, there's usually some non-trivial object lifetimes involved (i.e. cases where lifetimes can be encapsulated and abstracted away from client code). Yes, sometimes all of these can be taken care of by arenas (and there are languages, like Zig, that strive to be very arena-friendly), but that -- i.e. the case where all objects are easily arena-able -- is not the more common scenario.
The article mischaracterizes the decision and the law. The economic analysis under Section 6 requires the EPA to do a system-wide cost-benefit analysis: https://www.ca5.uscourts.gov/opinions/pub/23/23-60620-CV0.pd... (see p. 10). The question isn’t the economic impact on the polluters per se, but the economic benefits of the use of the chemical versus the economic costs. For example, if asbestos was the only way to have fire-proof insulation, an economic analysis might well show that the benefit of having insulated houses that don’t burn down outweighs increased cancer deaths. This is a common requirement in most environmental statutes.
There are plenty of alternative packaging materials without the health effects of PFAS, just like we learned to build properly and safely without asbestos.

Same holds for all extinct products, like leaded paints and leaded gasoline.

We can't really expect customers to make informed decisions about the large scale environmnetal and health impact of products, regulating them is exactly the job of the governing body.
1031 is not for owner occupancy. Of course there are ways around it eventually but it takes a few years to season things and you have to be careful to play by the rules.

Edit: I misread your comment about personal use
Datastar v0.9.0 with new website (HTMX/Alpine Hypermedia Alternative)
Carson (author of HTMX) has mentioned it in a few interviews (thank again). It's an alternative approach to hypermedia. It's "just" a plugin framework but ended up writing plugins that cover 95% of use cases out of the box in ~11Kb.

Highlights are...

* Built on top of fine grain signals

* Core is < 250 lines long.

* Any back-end, but have some helpers for Go.

* Very fast, very small

* Uses SSE for backend communications and it's actively being dogfooded for real-time apps.

Check it out and ask questions!

Next on the way is a web component for tracking network, reactive store, etc.
SourceForge fell to its greedy overlords and started shipping malware.