skysight-inc/HackerNews huggingface dataset:
A that would be hard to say. A lower limit would be reading your entire project and the dependencies that are used once, and writing the bundled/minified code once. Possibly some parts of that could be done at the same time as you determine the bounds of the dependencies as you read in the code. So O(n) where n is in operations over lines of code in your project at least.

There's probably trade-offs too. Like do you bother with tree shaking to make your end product smaller, or do you not to make your build performance closer to that optimal read-once write-once lower bound.
Scientists identify high-value conservation sites
A link aggregator that can decide which links to show.
It wasn't anything controversial just a video showing unsolicited connections made by firefox, to support my theory that browsers developers contribute to mass surveillance.
Just to highlight this:

> and you'll get more free time due to other people blocking your work.

It's the single most important part of working in finance. You will have 10 ideas and work you'd want your teams to follow through on and if you are lucky and the stars align, you'll get to work on 3 and 2 of them will be credited to others.
The key is the assumption that the machine is non-circular. So there must be a state in which it prints its last symbol (can we agree to drop the "of the first kind" qualification?). After that, it never prints another symbol, so you can just replace whatever it does after that with a halting state.

But I see the problem with this now that I've written it out. The future behavior of the machine also depends on the state of the tape so you can't "just replace" all the future behavior because you don't know which entry into the state that prints the last symbol will be the one that actually prints the last symbol. So that doesn't work.

Still, going meta, there are only two possibilities here: either the undecidability of the HP is equivalent to the undecidability of circularity (i.e. that either result follows from the other) or it isn't. If it isn't then that would be Big News, and if it is, then it's just a question of how easy or hard it is to prove this. If it's hard, then someone should get the credit for being the first, and since I've never heard anyone get the credit I conclude that it's probably easy notwithstanding that my intuition about how to do it turns out to be wrong.
No one uses old versions, sure.

But sometimes you have important old projects.

For example, my parents used photoshop elements to touch up all of my sister’s baby photos.

But my parents were not very technical and kept most of the photos as photoshop project files.

Idk if project files that old will open in newer versions of photoshop, but I don’t need to worry, bc I can always find a download of that old photoshop elements and open the projects in there.

It’s not as much about daily use as it is about planned (or inevitable) obsolescence.

Everything web based WILL become unusable or change drastically some day.
I remember watching one of the early videos of you starting working on the browser, and you said something along the lines of wanting a browser that was sort of a dumb renderer - one that didn't attempt to be a whole Operating System.

Does Ladybird still follow that ideal?
Is Ladybird going to be a member of the WHAT-WG?
And while it helps with compile time (especially with mediocre compilers like MSVC where a large time is spent in the front-end), it doesn't help with stripping unneeded code/data compared to LTO.
Also the Mozilla originated Fluent project for localization is another example of a stand out approach. It would be interesting to see how localization fits with the Ladybird browser project as a whole. Making use of a custom implementation of Fluent might actually be a good way of moving forward.
Meh, and they really needed all those fancy pioneers to tell me "Gib Belowski" doesn't remember my last... Shakespeare? Every little hullabaloo Demyster illusion sorry like the punctual rooting crowded rival to whicheriser I croung about growed some!
The Cyclist Who Uncorked a Historic Victory at the Tour de France
Good luck.

I mean it both in a sarcastic way and not.
ah yes, that worked wonders in Western Europe.

there are so many eager truck drivers, they have to put bollards around large gatherings of people now.
I run Mac OS.

I am aware that it builds on BSD.

Yet BSD is very alive and nobody who wants BSD is lost to Mac.

At least I personally have never heard anyone deliberating over a free BSD vs Mac.

Edit: and of course upvote. Apple ran with it. But they didn't run away with it. We still have it. Actually we have some patches thanks to them. As I mentioned in my other reply: Open source is not a zero sum game.
I think that pioneering the work of reimplementing web standards in not strictly OOP language will make the implementation easier for anyone else in the future, surely many of the problems exist by virtue of being done for the first time
I believe this was my last interaction with this service.
Thanks for hiding my contributions, i'm done.
Its not too bad. You could take a look at something like "BunJS + HTMX", its pretty killer.
You can have a local program which hands off rendering to some other server (eg. A cloud render farm) but which can also render locally.

I believe blender can do this, for example.

Nothing web specific about it.
Yep, that makes sense. Thanks, just updated docs.
> These are security considerations for all server rendered pages

Well - "server rendered" to my ears primarily means plain html generated on the server using Perl, Python, PHP, CGI or whatever. I presume you mean "server rendered with some client-side code to handle injecting into the current DOM.

Am I just too old-school or does using "server rendered" to mean fairly specific things seem strange?
Every bundler these days boasts "Rust" and "fast". What people really want is webpack feature parity. For a large enough organization with complex use cases and resource management, I yet need to see a real webpack equivalent.

(Meanwhile, swc parser can't yet pass all tests in test262 according to their website: https://docs.rs/swc_ecma_parser/latest/swc_ecma_parser/ )
I have been using this in a CI pipeline to maintain a business-critical PDF generation (healthcare) app (started circa 2010 I think), here is the RSpec helpers I'm using:

https://gist.github.com/thbar/d1ce2afef68bf6089aeae8d9ddc05d...

The code contains git-stored reference PDFs, and the test suite re-generate them and assert that nothing has changed.

Helped a lot to audit visual changes, or PDF library upgrades!
Mojeek Search Summaries
Since this is (at least approximately) invariant under continuous shifts, continuous rotations, and time, should there be some kind of conservation of momentum and energy be visible? At least the amount of white/black shade in cells isn't conserved as far as I can tell (unless perhaps the white is spreading out while fading to black over huge distances... but the grid is wraparound here so probably not the case here)
> Circular programs in Turing's language are those that return to some exact earlier state

No, they aren't. They are programs that print a finite number of "symbols of the first kind" i.e. 0s and 1s. They can print an infinite number of other symbols.

You might want to check out this branch of the discussion:

https://news.ycombinator.com/item?id=40855382
There are a ton of standards at a glance, but when you look closer, you realize that much of it isn't implemented by other browsers either, and you only need a fraction of it to render 90%+ of the web. The last 10% will be a huge challenge, but we've got a long way to go before then.

The JavaScript engine is our own LibJS, currently sitting at 94.3% pass rate on https://test262.fyi/ (although the number might be a little outdated, it's supposed to be higher! Need to investigate this..)
Considering how slow and buggy it is to use as a rootfs, you can instead put an initrd on Google Drive and just boot that. You'll need to make it by hand to get it to a reasonably small size, so picking up a copy of Linux From Scratch, and using libmusl or libuclibc along with BusyBox, will go a long way towards a functional system in a small size.

If you want a fuller system you could try 1) convert the filesystem to tmpfs after boot and install packages to RAM, or 2) mount a remote disk image as your roofs rather than keeping individual files remote. The former will be blazing fast but you're limited by your RAM. The latter will be faster than fuse, benefit from io caching, and not have the bugs mentioned.
COW2LLVM: The `isKnownUniquelyReferenced` Deep-Dive
I thought it was a typo at first, and should've said "casually". Maybe there's a general correlation, but I don't see a firm causation at all.
It does significantly speed up clean builds in many cases, to the point that those clean builds can even be faster than many "incremental" builds in some cases.
During the PC era it was making big technology accessible and it had a spectacular success on Wall Street due to this big shift. I believe no other Silicon Valley development has been as focused on actual tools for humans to use.

We are now left with Wall Street expectations that are out of scale for the usefulness of the technology being developed. The technology seems to be developed with a focus on being a service with the widest possible addressable market and the lowest possible cost per click.

Most of the world's problems don't fit those parameters. Luckily most tech news is white noise.
There is a lot of good work and it doesn't get much oxygen. The recent thread on the paper "What goes around comes around and around" is a good window on how to do good work.

https://news.ycombinator.com/item?id=40846883
I use Firefox every day, but they have lost so much market share that they have become pretty insignificant. They seem to have an oversized and poor management with fat paychecks.
Ah I see where you're coming from. I don't see any reason to expect that's the case here though. Package management has some fairly obvious tough CS problems inherent in it -- dependency resolution with version upgrades inherently feels NP-hard, for example. Whereas booting is about making hardware that initializes quickly and then making software that abstracts over a variety of hardware well... within the development budget you have. And then you're stuck with backward compatibility as everything changes. I could be wrong here but it feels like a costly engineering problem more than anything else.

(Note I'm not saying you can't do a PhD in it and improve the situation -- you could probably do that for any problem, honestly. Just saying that I think you could get most of the way there by just paying the engineering cost.)
It works well for a small website. For anything that requires more than a few dependencies, the package management is hell and load time will be insufferable. Also, not everything you grab from npm can just run in the browser even if written in ESM -- things get complicated quickly.
Why wouldn't it, look at everything else? Humans will destroy old growth, irreplaceable rain Forrest just to make a few million dollars. There is very little if anything stopping us from ruining nice things.

“Like an archer and arrow, the wise man steadies his trembling mind, a fickle and restless weapon. Flapping like a fish thrown on dry ground, it trembles all day -- Siddhartha Gautama"

The important part of the message there is "the mind is a fickle and restless weapon, flapping like a fish thrown on dry ground". People's minds are seething to fill a void, which often manifests in mindlessly grabbing money to buy things we don't need and acquire power for a brief period of time.

The only way to a better future is to better educate children about their minds.
Location: Berlin, Germany
Remote: Yes
Willing to relocate: Yes
Technologies: Go, Java, Scala, PostgreSQL, Python, Common Lisp, ...
Résumé/CV: https://macrolet.net/data/main.pdf
Email: hn AT macrolet DOT net
If you believe someone may be pointing a microwave weapon at you, please do not wrap your head in foil like a baked potato.
Agreed, Discord is a terrible platform and I wish people stopped using it. I expect in the next five years or so it'll undergo a very rapid enshitification and people will start using other things after that, but by then we'll have a decade of lost content.
There are some good points here, but I think the author neglects to dig deeper and explain how you can mitigate some of these risks with htmx settings.

I've been using htmx with CSP for the past couple of weeks, and I do find that it expands attack surface in an unpleasant way, but I do still think it brings enough value that I'm willing to rely on other protections.

>That cors.php file contains the JavaScript payload, and also sets CORS headers so that the browser has access to it.

The following htmx settings should defeat this:

htmx.config.selfRequestsOnly = true;
htmx.config.allowScriptTags = false;
htmx.config.allowEval = false;

>HTMX has functionality that automatically adds the correct nonce to inline scripts it retrieves. This is convenient, but totally breaks the security model of CSP with nonces.

Agreed, this seems like an anti-feature that completely subverts CSP.

>Of course, this is trivial to bypass: just close the div tag with </div> and insert your payload outside of the element with the hx-disable attribute.

This is true, but it kind of glosses over the fact that you have to screw up a lot more to give the attacker complete control over the HTML. Usually you're not just executing attacker-controlled content as HTML. If you're using a templating system, the more likely vulnerability is that the attacker is limited to escaping an HTML attribute and adding extra one. That said, it's true that if you have a vulnerability that allows an attacker can escape one context, it's much more likely that they can escape them all.

>For these to work, the application has to allow evaluating dynamic code, using the CSP option unsafe-eval. However, allowing unsafe-eval immediately makes it possible to inject JavaScript using HTMX functionality.

I think this is the weakest point, as htmx works well without unsave-eval. I've been using it in my app without unsafe-eval. The features you lose are just convenience features for writing HTML that you can still achieve by subscribing to htmx events in JS. Yes, it means you have to write a little bit more JS, but it's much better than including unsafe-eval.

I wish that htmx would be a bit more CSP-friendly, but it's much better than other similar frameworks.
Cisco's OS is a fork of BSD.
The point of CSP is to lock down your site so that any content (buggy or malicious) can't do damage.

This requires templating engines to separate styles, scripts and event handlers from the html.

> These are security considerations for all server rendered pages.

That's not true. With the right CSP and sandbox rules content can be made inert without sanitizing.

Sanitizing is still a good idea of course, but a rendering engine that is designed with CSP in mind will provide more layers of defense.
Location: Toronto, Canada

Remote: Yes

Willing to relocate: No

Technologies: Figma, UX/UI, Motion Design, Microinteractions, WordPress, Web Design, Design Systems, SaaS Design, User Experience, User Interface, UX Design, UI Design

Résumé/CV: https://saasdesigner.com

Email: bren@saasdesigner.com

Hey, I'm Bren - a product & UX designer working remotely.

Graduated with a Bachelor's Degree in Interaction Design. Over 8+ years of experience designing UI/UX for startups and entrepreneurs, including web and mobile apps.
That's not polymorphism as that template parameter won't be deduced in any context and you will always have to explicitly instantiate the template.
I guess Chromebook’s is the resurrection of the idea
Market forces, spread over long enough time, are usually a strong force of rationality. So on average, across long time, yes. At least according to the level of contemporary wisdom.
Latest Intel CPUs impacted by new Indirector side-channel attack
EU law does force them to advertise alternative search engines. I just updated Chrome on my work laptop and they gave me a slate of search engines. My Chrome defaults to Brave Search now.
> (...) switch to a less permissive license.

License "permissiveness" is a relative concept. From the point of view of the users of your software, the GPL is more permissive than MIT, since they have permission to see the source code. If you release software under MIT or BSD licenses, you allow middlemen to strip this right to users of your software.
There’s a stark difference between a tool not being supported and a tool vanishing from existence.

One day, potentially out of nowhere, web based tools can just vanish.

Imagine you were working on a film school senior project and poof your video editing tool was just gone!

Even if they gave a week’s notice, that wouldn’t be enough.

That can’t happen with something like Sony Vegas.
It was especially fun when you used someone's entire computer lab during night hours ;)
Chaitin has pointed out an important difference between such questions [1] :

> In our approach to incompleteness, we shall ask whether or not
a program produces an infinite amount of output rather than asking
whether it produces any; this is equivalent to asking whether or not
a diophantine equation has infinitely many solutions instead of asking
whether or not it is solvable.
If one asks whether or not a diophantine equation has a solution
for N different values of a parameter, the N different answers to this
question are not independent; in fact, they are only log2 N bits of information. But if one asks whether or not there are infinitely many
solutions for N different values of a parameter, then there are indeed
cases in which the N different answers to these questions are independent mathematical facts, so that knowing one answer is no help in
knowing any of the others

[1] https://theswissbay.ch/pdf/Gentoomen%20Library/Information%2...
Also, where is the actual ladybug? It's not in the logo.
there is no bug called ladybird, you mean ladybug..
I use hckrnews.com mainly because it only shows things that made it to the top page. It's an easy way to filter. If they can do that, it seems anybody could do anything with the content.
This can be said about every AI system/software and not just Figma. First the data is gathered for "self-supervised" training. Then, some product is built on top of it to gather users. Once the users show up their data is in turn used to fine tune the system in order to continue gathering data and subscriptions from the users.

The logic of AI companies is very simple and the entire value proposition is in how efficiently the company can convert user data/feedback into features that users will pay for so that the AI company can continue paying their cloud bills.
I would say that having files in the repo that you have to change but are not allowed to commit is more an issue with the project setup than with jj. The way this is usually done (at least where I work) is to have e.g. an `.env.example` file in the repo containing default values which the developer copies to `.env` after cloning the project (usually done by a setup script) - `.env` can then be changed, but is in `.gitignore`, so you don't accidentally commit it.
Not a tunnel, an invisible fence line.
I would find it hard to question with CMU papers. They are a pretty thorough when it comes to computer and the tradition goes wayback. If I disagreed with something in this paper it would be a clue to myself that I need to understand the problem domain better.

I also think as a school the philosophy maybe to thoroughly solve the problem with out regard to speed because eventually computers will be faster.

I think the paper is just pointing out that anything great is going to migrate to the RM or SQL model. So that if you start there any feature missing will show eventually show up. They also point out how many resources go to deploying immature ideas.
If you are also looking for broader context beyond what a bundler is, I have written a broader exposition on frontend builds here, which may be useful in understanding how bundlers compare to adjacent build tools: https://sunsetglow.net/posts/frontend-build-systems.html.
A prediction: Great LLM support will become a competitive advantage for programming languages in the future.
I use hckrnews.com. It's great!
Doesn't surprise me that this was flagged. It's a video that doesn't have much content. I suspect it would not have been flagged if you'd captured the list of domains Firefox is connecting to and done some analysis on it. Otherwise it's just showing that Firefox connects to a bunch of stuff. Hard to know if that stuff is bad or not.
That is cool. Would it be possibly implement something like Golangs %v and %T printf formatters?
What does this have to do with reflection. Also why do you need networking in the C++ standard library? Networking is neither something that is relevant as a vocabulary that needs to be common between libraries nor is it something that makes sense to be set in stone like basic algorithms. Just use OS interfaces or a third-party abstraction FFS.
1. We are not focusing on legacy hardware support. Given our release date is far in the future, we are mainly targeting the kind of devices most people will have a few years from now.

2. No concrete plans, but it's not outside the realm of possibilities.
Sure, these nagging voices keep me on track better than my old boring to-do list Somehow, Shakespeare convincing me feels sophisticated. However, Gib Belowski's laid-back tone makes a pancake outta my productivity sometimes ... Not a fan of Homer Chimpson's
deeplify | CTO (late co-founder) | REMOTE (ideally Germany based) | Full-Time

Deeplify develops an AI-based inspection platform that automates quality inspections for safety-critical components and infrastructure. Our platform helps industries like aerospace, energy, and automotive create defect detection algorithms using sensor data.

As we expand, we're seeking a visionary late cofounder to join as CTO. This role will shape and drive our product, translating AI concepts into user-friendly features and leading our roadmap.

For more info contact hello@todora.co directly!
> If you allow random users to write arbitrary unsanitized HTML into other users’ pages, you have already lost

Not really. The whole point of CSP is that, even if someone manages to inject arbitrary HTML into your page due to a bug or oversight, you can prevent injected scripts from running entirely, severely limiting what an attacker can do.

I'm surprised at the amount of comments on this post that seem to be completely clueless about CSP.
>(if it's valuable, people will pay, right?)

No? There are tons of valuable contributions, pure and applied, that "people" (markets) do not pay for at all, or pay pittance relative to their usefulness.
You're correct. Server-rendered pages may also have some client-side interactivity using, for example, JavaScript/AJAX.... It doesn't need to be a fancy framework like htmx, but one needs to be mindful about user input and remote content either way. The same "techniques" for securing a web page remain in effect.
Frankly. I don’t give a single fucking iota of concern to what republicans care about. Their party is putting their political aims above the good of the country and people of such poor character are a danger to humanity if given power.

Impeach them and ring the Russian Republicans up their hard earned espionage charges
Build a Developer Roadmap Generator with OpenAI and React
German industry turns to solar in race to cut energy costs
Ditto. Discord is fantastic platform to use and I'm a member of so many interesting communities across a range of subjects, but it does seem so very precarious to rely on the company to keep it going as it is.
The most hilarious thing is that the LTSC version of Windows 11 doesn't have those requirements.
Last time I emailed them, I think they said they're trying to release pro in July... so should be coming soon.