skysight-inc/HackerNews huggingface dataset:
This reminds me of the stories of industrial improvisation in WW2. Casablanca-class escort carriers and hundreds of other successful kludges changed history.

A few lines from the paper stand out to me:

* "A lack of transparency." How much transparency do you expect from military R&D, since that would give away US military secrets? I recall stories of the Soviets copying the US AIM-9 Sidewinder to create their K-13 Atoll. Military secrets need to be secret.

* "Multi-Year Big Tech Software Contracts Could Lead to Dangerous Dependence on the Private Sector" The US Army does not build tanks. They buy them and maintain them. Even then, most maintenance is done by civilian contractors.

* "grandiose claims about the effectiveness of artificial intelligence" I suspect AI will change warfare forever. Humans freak out under fire, AIs may not. A semi-competent person under fire is a rare gem that you treasure.

* "overestimation of China’s military and technological capabilities" I would rather overestimate my opponent than underestimate them. Underestimating a military opponent is usually a fatal mistake.

* "the idea that America has the ability and duty to protect the world’s democratic societies" The deployment of the US Military in the last century has mostly been to protect other countries. We can debate how democratic many of those countries were, but protecting other countries is the most common use case of the US Military. The last two times we let someone bomb US territory was either 911 or WW2 in the Pacific. If you have to fight, it may be preferable to defend Taiwan rather than Hawaii.

* "a steadfast belief that the best way to preserve U.S. dominance is through a free market that prioritizes corporate needs" A strong economy that could not be bombed by the enemy won WW2 for the US. A strong economy won the Cold War for the US. If anyone has counter-examples, I'd like to see them.

I'm no fan of the US Military; I'd disband the entire US Army and Marine Corps.

But this author is just anti-American. Let's look this guy up..."Roberto J. González | Department of Anthropology - San José State University in California."

He's strongly linked to https://equaljusticesociety.org "The Equal Justice Society (EJS), California Black Power Network (CBPN), and six former members of the California Reparations Task Force ... formed a new collaboration called the Alliance for Reparations, Reconciliation, and Truth."

I will not elaborate on the FARA implications.
After having very similar observations I accidentally went down the philosophy rabbit hole. I would look up wiki pages like "Newton's flaming laser sword" and get into a neverending cycle of reading all the "see also" links recursively and started to realize just how meta-ly subjective literally everything is.

And while I was already super logical being a programmer and such, I don't even think that I like having did this, because now I am starting to lose the ability to "posit" or believe something is true, because one can always argue that so many things are subjective that it is impossible to come to an agreement on something in any reasonable amount of time.
Type theory can be complicated! OTOH e.g. untyped lambda calculus is purely functional, and lives without types. It can be easily explained using the notion of "macro", or text substitution, familiar to any C programmer.

Certainly knowing some category theory helps. Finding out mathematical underpinnings of e.g. monads is some effort, and a foray into a non-daily math territory. I'd compare it with learning about matrices and quaternions when doing 3D geometry stuff. In either case, you have to make an effort and acquire a bit of special knowledge. But once you've learned it, it becomes and remains "intuitive", you don't have to think deeply or write complex formulae to use it. You just write [int(x) for x in line.split(",") if x] and don't mentally split this chain of monadic operations into an isomorphism and a catamorphism.
I favourited this a few days ago to have a listen through on the weekend and some of this is really great, thanks for sharing.

Marc Ribot and Los Cubanos Postizos in particular
Yes 100% and it's not helping his job search.
At million user scale, feature parity and compatibility is truly paramount and, `rg` aside, Rust utils don't have a great story to tell there. Such software has evolved in the course of decades and its (usually despair-inducing) code is tailored for dealing with a tremendous number of edge cases, platforms and architectures. Rewrites in Rust tend to write "the cool parts" and indeed write them better and faster, but that is just not good enough for replacing the standard tools.
In my country, the ISO member org engaging in standardization (a pretty well-known one) isn't funded by taxes at all but is a non-profit, funded by member fees.

Even assuming the work of standardization bodies were tax-financed, that by itself still doesn't imply standards should be free of charge. It's the same thing when you have to pay a certain amount for any state or communal service you're receiving as an individual or business, such as idk real estate transactions or traffic management for construction or events, even though the service is performed by an authority or stage agency.
In my experience, Rust -> move faster than C/C++ because you don't have to keep fixing things.
Is this risk correlated to inhaling vast amounts of smoke from cooking in Asian households?
Really? I hear it all the time. I mean, if it's on the Internet it must be true.
Wonder what happened to the victim, Eiswert, in the end? The damage was done, and I don't think it can ever be fully rolled back, unfortunately.
Did you read the part where they said that they're a two-person indie game studio with a development cycle of 3-12 months max?
What sort of investigations provide a balanced view, then?
Seems mostly a certain group pushing these laws and they are not anglo saxon.
I've been watching too much Rick and Morty. I thought this was related to Water-T and the show at first glance.
Pretty awesome, but I hope they get the node:crypto module to 100% soon.
How do you define "defensive"?

The US has repeatedly been involved in wars to defend our allies from external attack.
> incendiary responses to rust criticism can be

I've not experienced this. Do you have examples of the rust community flaming someone for having negative opinions about the language?
Ironically this actually helped Honda in the end, when it was Harley Davidson lobbying US gov for help.
This feels overly cynical to me. The article is a bit rambly so let me try to distill the problems:

1. Most relying parties support resident keys only. This makes a bad user experience because users are surprised when they run out of space, and may have to wipe their device to get more.

2. Most authenticators do not allow you to export your keys. If a relying party only allows a single credential per account, this creates authenticator lock-in, which is a bad user experience.

3. Chrome is uncooperative about the Authenticator Selection Extension, and that can make a bad user experience if the relying party rejects the device attestation after enrollment.

Yes, these are all bad user experiences, but they don't indict the technology. It sounds to me like the relying party can mitigate all of these issues:

1. Support non-resident keys. Seems like it really doesn't have to be a bad user experience. Usernames are easy to remember. Just use their email address.

2. Support multiple keys per account. Most users will have multiple authenticators. Let them enroll several and they're not locked into any one in particular. Most users won't care about this, but for important services it's an option.

3. As a relying party with strict authenticator requirements, just explain those requirements on the passkey registration page. People can read. They don't have to be that confused when their unsupported key doesn't work.

I get that there's nothing users can do when the relying party creates a bad experience, but if a relying party has all the power to create a good experience, is it really worth being this gloomy about the technology?
It certainly is if you're motivated to take random Internet comments seriously.
The alleged libeler.

Which can mean, sometimes, that the perpetrator is good at covering their tracks and selects victims who can't sustain a prolonged legal and public opinion battle trying to prove their case.

They need only allege that someone libeled them to impose significant legal costs on that person, costs that for many are not feasible. You don't get a public defender.
Consumers Hate 'Price Discrimination,' but They Sure Love a Discount
> Did they actually sell any copies of the 'Escape from Darkness' version?

While I've never seen sales numbers, reportedly the game has sold a couple of million copies and, anecdotally, a good ratio of the more dedicated/hardcore players bought the EoD version for the advantages it brings. On reddit there is the idea of a lawsuit kicking around.
> Talk to your loved ones after they’re gone.

Ok, no, that's bad. Have you seen Black Mirror?
nerds have the best arguments
There goes internet anonymity...
Imagine the day when Alexa speaks back to you in your own voice. People would go insane.
Because the security key doesn't store any public keys.

Basically, the security key stores a single symmetric key. It'll generate a public/private keypair on registration, encrypt it, and send it to the server. On authentication the server will return the keypair back to the security key, which decrypts it and uses the retrieved private key for authentication.
Tech articles have gone the way of online recipes. I had to read his grandfather's biography to understand he had a bad experience logging in with passkeys
It’s good unless you want a repl (they pretend to have one but it’s miserable: >6s latency all the time when it updates), or you plan to use any native modules. The error messages are also significantly worse than node’s. I used it for a bit, but node with ‘—loader tsx’ does everything I want nowadays with none of the downside. If I was building a simple server, perhaps with websockets, and I was sure it need native modules, I’d consider using Bun. I have several such services live now actually.
> Making a fun & interesting games is about rapid prototyping and iteration, Rust's values are everything but that

I found this to be true of C after many, many years coding in C. I noticed that the first selection of data layout stayed throughout the life of the code (with a lot of tweaks, additions, etc.). But didn't really think that much about it.

Until I started writing code in D. It was easy to change the data layout, and I did for experimenting. For example, changing a reference type to a value type, and vice versa. This was easy in D. It's just too much work in C, so it didn't happen.

The reason is simple:

p->b
v.b

To switch between a ref and a value type, you've got to search/replace the -> into ., and the . into ->, and not disturb the dots and arrows of the other types. When dealing with 100,000 lines of code, this is a non-starter.

But with D, both reference and value types are used as:

p.b
v.b

making it easy to switch between the two, and also switching function parameters from values back and forth with references.
There is like the middle ground of both don't do ads and don't do war, too.
By "balanced view," do you mean the one where Amazon lawyers attempt to erode the ever-growing list of credible reports outlining Amazon engaging in and encouraging the tactics outlined in the article/book?

From what I can tell, the article is remarkably spot on.

It begs the question, without government contracts[1], where would Amazon actually be? Would Amazon be out of business? Hmm... Makes you wonder.

[1] https://watson.brown.edu/costsofwar/files/cow/imce/papers/20...
If philosophy is the art, then what is the craft? Sophistry?

(inspired by https://news.ycombinator.com/item?id=40074089 )
This tech makes me not want to have a YouTube channel.
I wish I had your creativity when trying to think of something useful to code.
>these are anti-competitive practices

So why can't the solution be that the DOJ files antitrust lawsuits? Like every other antitrust issue. It really doesn't make sense to create a new set of rules when there already exists antitrust regulations.
Doing the mental math is a lot harder, too. Any halfway decent computer nerd knows on some level that 2^10=1024, but 1/2^10=0.0009765625.

Doesn't quite lock into the memory banks so easily.
It's like showing a video of an iPhone taking ages to load a web page or a very grainy photo that it took.. but it's from a 5 year old iPhone.

FSD has come a LONG way in 5 years.

https://www.youtube.com/watch?v=43Lrrhn0CMk
this is just from Share Embeds.

they now disclose these are used at login.
Not having any choice isn't great either. See Soviet grocery shops.
I think this is still possible with access points that require installing and trusting a custom certificate. The example in my mind is WeWork's WiFi
Maybe "nothing new under the sun" and/or "nothing to see here" are not sensible reactions to the article.
Gaming is C++ first and foremost. All other languages suck, except when used to script game engines (C# in Unity, etc.). There's no practical reason to choose Rust or anything else. I don't think Rust is particularly bad or good here. There's decades of work to catch up on. I don't see Rust becoming a truly great language for games unless it's blessed by Epic or Unity.
> Stripe has, frankly speaking, been somewhat slow on building out more sophisticated subscription and billing products, opening the door for companies like Paddle and more recent arrivals like Lago (which focuses on open sourced billing) to create significantly more nuanced offerings

Why do you think they’ve been slow?
They mention that they're moving (back) to Unity/C#.
> Rust gamedev ecosystem lives on hype

I've been saying this for years. I've tried to get into Rust multiple times the past few years and one of the things I've tried was gamedev with Rust (specifically the library ggez when it was still being worked on, and a little bit of Bevy). I admittedly never got far, but I gave it a solid shot.

My experience was instantly terrible. Slow compile times and iterations, huge package downloads (my project folder was roughly 1gb for a simple 2D project), and of course Rust itself was difficult to get into with lifetimes and having to wrap and unwrap my variables constantly and getting into wrestling matches with the borrow checker.

I kept telling myself that everyone loves Rust and the community loves to rave about anything Rust-related and maybe I just don't get it, but it took some time to realize that no... It's just a terrible choice for it. I even tried to make UI with eGUI and was still miserable. Rust is a systems programming language but the community is trying to convince everyone should be used for general purpose stuff.

And my other biggest problem is that they keep painting other non-Rust things as being fundamentally flawed for not being Rust. "It's not memory safe" is the biggest one thrown around, but when was the last time memory safety was actually a big problem in games? Unity uses C# which is garbage collected, Godot uses its own scripting language which makes it nigh impossible to leak memory, Unreal AFAIK has its own tools that makes memory management trivial. Rust game development feels like a solution looking for a problem to fix.

I am curious about Bevy when it becomes mature and has its own editor, but for now I'm just not convinced gamedev with Rust will ever take off.
Yes, but:

1. On today's internet, the sender's mail server almost always talks directly to the receiver's mail server anyway, both so that random intermediate servers don't see the message and (mostly) as a spam mitigation measure.

2. That MX-to-MX connection will usually happen over TLS, which is encrypted.

3. Almost always, the clients will connect to their respective mail servers over an encrypted connection.

So in practice that kind of injection isn't really feasible.
Since every other language now has higher order functions and lexical closures and things like that Lisp isn't as special as it used to be. Now it's mostly just a really ugly version of those languages but with a weird emphasis on recursion and a very fancy macro facility.

I find I can move between dynamic languages and Scheme pretty easily.
> Sure, the syntaxis is different but the concept is the same

No, and this has been discussed ad nauseam in every discussion about Tailwind, ever, especially here.

I'm not a huge Tailwind advocate, but the difference between it and inline styles have been explained a million times.

It's like saying "wow so this language uses an immutable string type and vaguely C-like syntax! Is it Java?"

Except for the difference that Inline Styles strictly cannot do the same things that TW can do, without the help of another stylesheet or CSS block.
How do you gain intuition without repetition?

I learned math by blindly following algorithms. Over time i gained intuition from seeing how variations in the input changed the output. The deeper understanding kind've slipped in there...I don't know how. I don't think you can build real understanding without rigorous practiced repetition.
> — Verizon, AT&T, and T-Mobile slowed down YouTube + Netflix traffic. https://www.bloomberg.com/news/articles/2018-09-04/youtube-a...

They still do... Get on AT&T and hist fast.com You are pegged at 4Mbps
That’s my problem with TOTP second factor authentication. I’ve used Authy for years because it works on Windows and mobile, but now they’ve decided they aren’t going to work on Windows anymore (but they still force update a perfectly working Windows app and there’s no way to opt out). I have no way to export my 30+ TOTP accounts to a new system. I often don’t want to have my phone around when I’m trying to focus and get work done, but now I have no choice. It’s infuriating. Is there any cross-platform TOTP system that has the ability to export your keys? Is that even a thing that’s technically feasible?
Tech companies are putting AI into your gadgets whether you want it or not
Show HN: I made an AI Software Engineer with Claude 3 Opus
Hey HN!

Andrej Karpathy, founding member of OpenAI and former Director of AI at Tesla, recently shared his thoughts on the future of programming:

The hottest new programming language is English

— Andrej Karpathy (@karpathy) January 24, 2023
https://twitter.com/karpathy/status/1617979122625712128?lang...

I've been using LLMs to help with my software engineering work since ChatGPT originally came out.

When Anthropic released their Claude 3 series models, I was shocked at the code quality they produce and was able to get new projects running with minimal debugging.

I've been listening a lot of the big interviews from Dwarkesh with people like Demis Hassabis and some of the technical discussion around task execution gave me the inspiration to attempt creating a full AI Software Engineering system requiring only a text prompt.

It's not accurate enough to programmatically deploy, but seeing what the system can produce in 30mins-1hr has continually blown me away.

Unlike Devin, which is still in a 'waitlist period', saas-quick is available to use right now.

I'm a solo developer and the frontend isn't polished or anything, but you can follow along the process as each task is executed and download the project zip at the end.

I appreciate your time and am grateful for any feedback!
So it really doesn't buy that much? Maybe in cost?
I find that Jonathan Blow ranting about Rust game development here https://www.youtube.com/watch?v=4t1K66dMhWk. He adds interesting perspectives to the discussio, how the language makes the Rust game developer resort to arrays and their so called Rust point of views.
Parts of the Rust community are toxic indeed, but I've been around long enough to recognize the same pattern in communities of other hot programming languages or frameworks in their up-and-coming phase.

There's something about the new hot language/framework/paradigm that always attracts the type of people who wrap their identity up in the hot new thing. They take any criticisms of their new favorite thing as criticisms against themselves, and respond defensively.

What I see now in certain Rust communities feels a lot like what I saw in Golang communities in the early days. I had similar experiences when React was the new kid on the block, too.

Some of these communities/forums are just inhabited by people who thrive on dunking on noobs all day long. The good news is that they tend to get bored and move on when the next new thing comes out.

I'm already seeing this in my local Rust community as the chronically online people are moving on to Zig now. They even use one of the Rust discords to advertise their Zig meetups and proselytize about Zig at every opportunity. Eventually they'll get bored and move on.

> > That being said, there is an overwhelming force in the Rust community that when anyone mentions they're having problems with Rust the language on a fundamental level, the answer is "you just don't get it yet, I promise once you get good enough things will make sense".

I don't fully agree with this assessment. In my experience, Rust community members who arrive with well thought out complaints or suggestions are welcomed by the people who like working on programming language fundamentals. You can nerd snipe a lot of Rust enthusiasts by showing up with a difficult problem involving tricky parts of Rust, which will often result in some creative solutions and discussions.

On the other hand, Rust communities are inundated with people trying to write Rust as if it was their old favorite language. I've spent a lot of time trying to get people to unlearn habits from other languages and try to adopt the Rust way of doing things. Some people refuse to let go of paradigms once they've used them for years, so doing things the Rust way isn't going to work for them. I've worked with enough people who spent more time fighting against Rust than trying to adopt Rust ways of doing things that I've also reached the point where I don't engage once I see the conversation going that way. Can't please everyone.
I've been hoping to see more languages that compile to Go, it might be the most practical way to arrive at what you want. For example, see Borgo: https://news.ycombinator.com/item?id=36847594
That's not an argument against parallelism in game design in general.
I was thinking about how it was good he observed potential tau neutrinos and not some motherf*ckers in a blue uniform, otherwise this could have gone different. He could have swarmed!
Sounds like a no-true-Scottsman fallacy
I think if you block port 443 in such a way that a client sees it closed like any other non-HTTPS website, and the user has never been to the requested site before on that browser (to avoid HSTS being in effect), and they omit a scheme when typing the URL into the address bar, then the browser will make an unencrypted request and render the unencrypted response. However, popular browsers these days will add a "not secure" note near the address bar (where historically it would've had no such indication besides lack of padlock) and they'll try https first before falling back to http (but no fallback in the case of cached HSTS info from a prior visit).
The problem with languages is they don't compose. Iow, one missing feature needed automatically invalidates the language entirely. Swift is targeted at Apple platforms and cross platform is an after thought. Kotlin targets JVM and while it is cool in concept, I hate it as a user (and Kotlin native isn't near as mature). If were considering something else at this stage I'd probably put my time into F#, but even it has its cons.

NOTE: By "compose" I mean that if I want feature A, B and C from lang X (has A and B), Y (has B and C) and Z (has A and C), but there is no way to get A, B and C in one language without creating a brand new one. I cannot mix and match features from different languages.