skysight-inc/HackerNews huggingface dataset:
What's the rationale behind Go choosing internal iteration (the iterator calls a function for each value, like Ruby) over external (the iterator returns each value, like Python and C#)?

My understanding is that internal iteration makes it easier to write iterators (producers) but harder to write the consuming code. That's why Go needs to re-write the body of each `for` loop as a function body, including special handling for `break`, `return` etc.

External iteration OTOH makes it harder to write producers but easier to write consumers. Python and C# therefore allow external iterators to be written via coroutines/generators.

Wouldn't Go's goroutines make the coroutine approach to external iterators straightforward? Whereas the re-writing necessary for internal iterators seems convoluted?
A tall above-ground building with no windows doesn’t seem like a good candidate to survive a nuclear blast.
Your link has John O'Shaughnessy being interviewed by Barry Ritholtz (two respected folks in finance), and O'Shaughnessy later corrected himself:

* https://twitter.com/jposhaughnessy/status/115517108366392524...

While I do believe set-and-forget passive investing is best for the vast majority of people, last time I checked that Fidelity study does not actually exist, and the story is apocryphal (no one seems to be able to actually link to it).

If you ask Fidelity about it, they'll tell you it does not exist:

* https://www.morningstar.com/columns/rekenthaler-report/archi...
> A major dumb is that security people think breaking in is the end of the world. For vast majority of users it's not, and it's a balance between usability and security.

End of the world? No. But it's really, really bad.

When you get your stolen car back, problem over.

But your broken into system should in most cases be considered forever tainted until fully reinstalled. You can't enumerate badness. That the antivirus got rid of one thing doesn't mean they didn't sneak in something it didn't find. You could be still a DoS node, a CSAM distributor, or a spam sender.
> How common/unusual is that?

I’ve never heard of it. In part because it sounds stupid: most whistleblower rights penalise retaliation. This language seems to mandate it.
I kinda agree that there should be a market for more journaling apps. Something like Logseq for non-programmers would be a hit.

At the same time… I think you overestimate how hard it is to get started with your own solution. The shell script and system-wide keybinding is just a convenience, since many of us like to automate things that we do daily. If you don’t want it you really don’t need it.

Just make one large file in whatever editor you prefer, and keep it always open. Manually add a new heading like “2024-07-14” to that file every day. Write notes in bullet points.

The basic system is independent of any app or script, and is more or less identical to what you would do in a paper journal. It’s a bit harder to add equations and diagrams, but a bit easier to search through it and access it from any device, that’s the trade-off. But writing a date stamp daily is really not a dealbreaker if your top priority is to not configure anything.
Saving money 100% also lower latency on distributed access. Accessing file partitioned S3 doesn’t require to spin a warehouse and wait for your query to go on a queue, so if every job runs in like k8s you don’t have to manage resources and auto scale in snowflake is a “paid feature”

I believe just not having to handle a query queue system is already.
This is awesome! I've been wanting a more ephemeral and private social media alternative, and the fact that there's no account required is 100% choice. I don't trust anyone with my information these days, especially not social media companies.

This sounds like the perfect alternative to creating Telegram/Slack/Discord channels just for simple communication updates, especially if it's with gamer friends that I don't want to know my real email address.

Two thumbs way way up from me.
> That's unreasonable. What kind of madman wrote the rules for this universe?!

My chain of thought went: "QR code containing a bobby drop tables! What would a human version of this be? Viral memes, in the original sense, that cause psychic damage? Oh wait, photosensitive epilepsy is a thing."
>required them to waive their federal rights

I learned decades ago that contracts cannot be enforced upon illegal requests. Perhaps OpenAI has decided to leave their whistleblower compensation to the judicial system's interpretation..?
It’s basically a U+1F642 Slightly Smiling Face. Almost universally considered passive aggressive nowadays (you can of course make it more obvious with the upside down version, U+1F643).
Have you tried Gitea Actions? https://docs.gitea.com/usage/actions/overview
MSI intranet exposed 600k warranty claims, containing phone numbers,addresses
Generic instance methods are not going to happen.

The only point of methods in Go is to implement interfaces, and that doesn't really work out.

This has been known since the generics proposal.
Useful for new wibesite
It is the opposite. Market timing does not work reliably. Active management produces worse results on the long run. no individual trader or active manager can consistently beat the market. however active fonds may have periods (even several years) where they out perform.

for private investors buy-and-hold of highly distributed ETFs is the best way to do it. The easiest way to get started is a one ETF portfolio like e. g. Vanguard FTSE All World or SPDR MSCI ACWI IMI. They perform internal rebalancing automatically and you virtually have nothing to do. buy them and don't look at them for the next 20 years.
I'm curious why anyone who needs to deal with an in-person market unless they needed something same-day - or you need a specific part fixed. I feel most things described are best done over Taobao.

Navigating Taobao, determining product quality, and haggling with sellers of Taobao's chat is a whole artform. There are a lot of subtleties but you can get all sorts of crazy stuff done. Parts customized, special orders etc. Just a matter of asking sellers directly and negotiating a bit. They're generally very patient. I don't know if there is "Essential Guide to Taobao" though
Ok, so who’s going to pay the bills while five of us engineers go and build an MVP?
Main reason would be that every dev must then remember to add/strip a prefix at some boundary around the DB, which I think would be pretty error prone.

A more minor benefit maybe is that they're natively presented with the prefix in the DB, so eg communicating with non-technical team while running SQL queries doesn't involve constantly adding/removing prefixes...
Individual traders beat the market all the time, it’s not impossible. But you can’t expect to do it reliably, because in practice it’s essentially gambling, unless you’re Warren Buffett, or those firms that utilize sophisticated quantitative or algorithmic trading.

So for all intents and purposes, the takeaway for regular investors should be that they cannot expect to beat the market (but they can gamble on it if they like).
You’re missing the word ”expect” in the original claim.

You can beat the house at blackjack, but you can’t reliably expect to do it.
I've tested Qubes OS for about half a year as a primary OS and ended up switching to another OS. The concept and ideas behind it are great, but battery management and support of my Thunderbolt dock was awful. I switched to Fedora and with regards to graphics it's even more buggy.
I'm afraid this is a false dichotomy.

People can use HTTPS now instead of HTTP, without degrading usability. This has taken a lot of people a lot of work, but everyone gets to enjoy better security. No need to lock and unlock every REST call as if it were a bicycle.

Also, a hacker will replace the broken glass within milliseconds, and you won't find out it was ever broken.
In C#, `yield` is a kind of return, not a function call. The two approaches to iteration are quite different (external vs internal iteration).
It's not really that bad. Perhaps a bit old-fashioned; the author might be a fan of 19th century literature. That paragraph would be improved with a dash instead of a comma after "currents" -- but, besides that, there's nothing much wrong with it.
esp. for such a small device a better screen to body ratio would be desirable.
I don't think the argument is that dumb. For a start there's a difference between white hack hackers and dark hat hackers. Then here he's talking specifically about people who do pentesting known exploits on broken systems.

Think about it this way: do you think Theo Deraadt (from OpenBSD and OpenSSH fame) spends his time trying to see if Acme corp is vulnerable to OpenSSH exploit x.y.z, which has been patched 3 months ago?

I don't care about attacking systems: it is of very little interest to me. I've done it in the past: it's all too easy because we live in a mediocre work full of insecure crap. However I love spending some time making life harder for dark hat hackers.

We know what creates exploits and yet people everywhere are going to repeat the same mistakes over and over again.

My favorite example is Bruce Schneier writing, when Unicode came out, that "Unicode is too complex to ever be secure". That is the mindset we need. But it didn't stop people using Unicode in places where we should never have used it, like in domain names for examples. Then when you test an homoglyphic attack on IDN, it's not "cool". It's lame. It's pathetic. Of course you can do homglyphic attacks and trick people: an actual security expert (not a pentester testing known exploits on broken configs) warned about that 30 years ago.

There's nothing to "understand" by abusing such exploit yourself besides "people who don't understand security have taken stupid decisions".

OpenBSD and OpenSSH are among the most secure software ever written (even if OpenSSH had a few issues lately). I don't think Theo Deraadt spends his time pentesting so that he can be able to then write secure software.

What strikes me the most is the mediocrity of most exploits. Exploits that, had the software been written with the mindset of the person who wrote TFA, would for the most part not have been possible.

He is spot on when he says that default permit and enumerate badness are dumb ideas. I think it's worth trying to understand what he means when he says "hacking is not cool".
> other CI systems also have this problem, but often provide mechanisms to write individual tasks in other languages

GitLab CI allows to run a bunch of commands in any Docker image you specify. The Docker image and/or your scripts may be self-written.

How do you find, for instance, GitHub Actions more advanced?
> AWS is way too bandwagonny these days. Back when it was all engineers they built things on the basis of "this is cool technology".

I don't agree. I think AWS has always been extremely customer-focused, and they scramble to offer whatever service might have any traction at all from customers. It's just that they are already providing the low-level baseline services, and now they are progressing to offer increasingly higher-level ones.

I'm talking about machine learning-driven firewalls, backend for mobile applications, video streaming, edge computing, even Blockchain and now LLM services.

As much as it might surprise you, there is plenty of real-world demand for these services. You might accuse it of being "bandwagonny", but if you take an objective look at it you'll find that they are playing the role of supply store owners during the gold rush. It comes at no surprise that AWS is the one part of Amazon whose revenue is growing massively year-on-year, with the last report pointing to a 17% growth year over year.

https://www.cnbc.com/2024/04/30/aws-q1-earnings-report-2024....

Is that what you would call bandwagonny?
Trojan Photons: Trapping Light in Nowhere Land Using Lagrange Points
Yes I read the article. This doesn't answer the questions in my comment.
They're self-hosting at https://gitlab.wikimedia.org/explore
No sorry, just geospatial (horizontal position on the surface of the Earth).

It should be theoretically possible to re-develop it for other spaces (it's "just" a hexagon tiling), but the H3 team put a lot of work into the details and you'd be taking on a big effort redoing that for a different space.
Come on, I recently scored a bunch of Black Plate 12AX7s in the U.S.
>"..and fight another battle of ideas in 4 years"

The assassination target promised loudly and repeatedly, it would not adhere to that. This a vote for him would be the last vote. Guy may as well have be another https://en.wikipedia.org/wiki/Georg_Elser if trump gets to power against the mummified establishment figure.
Src: retired electrician

Tip: I never recommended to any clients that they "lock in" to any one vendor's ecosystem (e.g. no computers within lightbulbs; no touchpanels) when rewiring their homes; stick to simplicity (e.g. no ceiling fans which operate via [losable] remote)!

The wireless switching protocols are among my least favorite household ecosystems ("smart home" stuff). I have seen 90+ year old switches which still work perfectly, while the 5 year old "latest-greatest" geekswitch gets firmwared out of operation.
> Returns from stock investing come from increasing stock prices.

There are other ways to make returns. Return from stock comes mainly from increasing stock prices and from dividends. But fundamentally, it comes from profits.

> Stock prices increase when earnings of the company grow.

There are many reasons stock prices increase. But whether it does or doesn't isn't really relevant.

When a company makes a profit, either:

* the profit is reinvested, the value of the company grows and the stock price grows, making a return for the passive investor

* the profit is returned as dividends, making the passive investor a return as well.

No growth needed for the individual companies either. As long as they are profitable, they make a steady return for the passive investor.

Thought experiment: imagine a company which is going to make 1 dollar of profit per year for all eternity, which it returns as dividends. For an investor with a discount rate of 95%, that company is worth 20 dollars. Say he buys the company for 20 dollars. After 10 years, that company is still worth 20 dollars, as eternity is still eternity, but the passive investor owning the company has made 10 dollars from the company.

As you can see, the passive investor made a return, despite the company only being profitable, but not growing nor shrinking.

You will make a return on your investment when your investment makes a profit, that is capitalism. Whether the profit is increasing, decreasing, flat or going in circles does not really matter, as long as it is a profit and not a loss.
> Do you know if you can use your own GitHub Action to build and just throw the static html, css and js at CloudFlare?

I didn't know that, how cool, I'll try it this way, thanks!
My understanding from Stripe was that they're stored with the prefix as text in the DB, but I might be wrong.

As for doing the translation at the API boundary, my only gripe is that it's likely to be error-prone: every dev needs to remember to add/strip the correct prefix in every route. Of course you can add some middleware that is context-aware, but still there will be cases (eg live querying while talking to non-tech team) where not having to translate back-and-forth would be great!

Anyway, appreciate the comment and definitely agree that for most teams just using a UUID and adding a bit of code is a more obvious route than using a new ID format someone just made up!
I think one should aspire to not have to make use of a container to get to where you can build a project. I don't think it is productive to start off by telling people that it is okay to make a mess of projects and then try to hide that mess inside a container.

I think it is poor advice to tell people that it is okay to sweep their mess under the container carpet.

Of course, this also means that people who maintain tooling for a language need to be open to the possibility that they may have something to learn from developers. And likewise, developers have to understand that not all of the things they want from the standard tooling will necessarily improve it.
That’s was Bush not Obama
Presumably Trump would have a vest on
We're long past the times when you would ssh into prod as root, run `nano /var/www/index.php` to fix a bug.
Does this boot procedure work with EFI/UEFI ? If so, does UEFI supervisor emulate swithing real/protected/long modes or does it go in real hardware ?
> time in the market always beats timing the market
> The implicit assumption in that refrain is that,

Only if you were fine with waiting 50-100 years. The market in 1950 was more or less at the same level in real terms as in 1906, of course dividends were way higher back in those days. If we take that into:

e.g. if you invested 200$ in S&P 500 in 1906 adjusted by inflation in 1950 you would have had ~$1570 in 1950. Which is an average annual return of ~4.7% which is not terrible but you would have made approximately the same by buying high grade corporate bonds just with way less volatility.
Chemical reservoir computation using the formose reaction
Sanitize it for all XSS. Or better yet, avoid something like HTML or anything that can contain executable instructions, when all you need instead is a regular markup language.

I’ve seen HTML be used for user rich text input and it was an absolute mess, with old data that wasn’t properly sanitized, the sanitization library itself getting outdated, someone putting potentially unsafe content in from another system and so on, whereas people would sometimes bikeshead and worry about breaking old style classes or display of the data across multiple systems instead of addressing just how serious the potential risks are.

Not all of the details here might be accurate, but honestly just use Markdown or something like that for user input, disallow HTML altogether and never use the raw input.
> “It absolutely could be showing the displacement of air due to a projectile,”

Not sure why the agent say the photo could be of some air effect (shockwave?) and not the actual bullet.
These areas are not nature parks. They are modified/burned to support grouse. Natural predators are trapped and farm-raised animals introduced to be later shot. A hunting reserve is not a nature preserve.
I have not, just read that it's a bit fresh at this point. I've not yet invested anything in my GitLab setup and will try Gitea actions before deciding. Are you running Gitea locally? How was it for you so far? Thanks

> "Gitea Actions is still under development, so there may be some bugs and missing features. And breaking changes may be made before it's stable (v1.20 or later)."
I have it disabled and at the very least I have to type my location in every time on desktop because it doesn't track frequently visited places locally
> Instead they focusing on AI when the rest of features are unfinished.

That’s extremely common now unfortunately.
Snowclones of Illuminati Ganga
It is an explicit goal of the go team to minimize the number of keywords in the language. Simple languages have fewer keywords so go must have few keywords. https://go.dev/ref/spec#Keywords
Look how simple that is.

This is why things like ‘close(channel)’ are magic builtin functions, not keywords (more complicated) or a method like ‘channel.Close’ (works with interfaces and consistent with files and such, so not simple).
Wasn't there a thing ages ago about investment banks / finance firms having to carve out "unless you're telling the regulator" exemptions to their "you must not share any proprietary data with anyone ever" clauses?
I've begun hearing Joe Rogan's likeness in TEMU-like YT advertising... how to monetize then? It's obviously not products endorsed by the real Joe.
Hermit: Deterministic Linux for Controlled Testing and Software Bug-Finding
I know similar cases. Sorry for your loss.
That’s shooting in burst mode, it shoots separate photos rather than short videos. In sports you typically use short shutter speeds to freeze the action. If you would stitch these photos together into a video, the results would look jittery because there’s no motion blur.
> "Anonymous" is just the default username for someone on 4chan.

Not only is this the case, it's stringently enforced on a grassroots level. People are allowed to select usernames on 4chan, but people who do are considered less trustworthy and less savvy, and are generally disregarded by most anons.

> Asking "What does anonymous thinks" is a roundabout way of asking "what do <random people> think?"

Right, but with the caveat that they're not at all random. The average anon is like the opposite of the average redditor: High in disagreeableness, a born contrarian, and fond of saying provocative things to elicit a response. ("Give me (you)s now.") So asking "what does anonymous think?" is like asking what random people with those traits think.
Serviceability is not an unalloyed good. There are always tradeoffs.
Nvidia RTX A6000 GPUs Power the Las Vegas Sphere
> no instruction timing chart?

Instruction timings are in the pink table on the left-hand side. For example, `ADC HL, BC; ED4A; H15` means that the instruction affects the flags as in row H and takes 15 cycles to execute.
https://research.swtch.com/coro at the very end explains that channels are too slow.

Re mutexes: one of Rob Pike‘s Go Proverbs (https://go-proverbs.github.io/) was "channels orchestrate, mutexes serialize“. Both have their places.
I suspect the overlap between PWA users and those who value privacy and have the technical means by which to achieve it is high.
For me returns on personal investment in stocks, funds and ETF:s consist largely of dividends.
This killed FreeDOS (and presumably all the other *DOS as well) on modern hardware unfortunately. It was fun as long as it lasted. I do not know what the next-best single-user, single-process, non-bloated OS would be to run on modern hardware that still has some reasonably modern software and can be used for distraction-free (hobby) development the way FreeDOS could.
I don't think that prefixing IDs with some semantic "type" is not such a great idea, because it makes IDs unnecessary long (and inefficient) and because it is basically a mixture of the actual data and a type, but we have typing systems for that. In general it is also not really an advantage. In case of URLs like http://example.com/items/0190b12d-5ed1-72f5-964c-2252afd2da7... "items" is already the "type". To avoid confusion on the server side the value extracted from the path could be put into some object like an ItemId (basically a typed wrapper around a UUID).
The article was saying that this was likely the first shot. Standard bullets fired from an unsuppressed AR-15 travel faster than sound. No one in the crowd would have heard anything until about 70ms later (shooter about 125 yards away, assuming standard 62gr cartridge). Trump would have heard the crack of the bullet flying past him and maybe a few others close by but the rest of the crowd would have heard nothing. Based on how close that streak is to Trump, I doubt the photographer would have heard anything at the point the first photo was taken. Very rare to capture a bullet on camera when you don't even know it's coming.
I was guilty of this habit of misusing Makefiles for a few years. I see why it's appealing but you're totally right for all of the given reasons.
Nowadays I use (and highly recommend) using standard-library Python for this sort of thing.
It's much more readable than shell scripts and it's completely cross-platform so you can use the same script for Windows, Mac, Linux.
Validating data on input is just checking for "known badness", and is pretty ineffective.

If you've got specific structure requirements for the data you store, parse it into that structure.
We expect some individual traders to beat the market (and some to do much worse than the marker); that's variance. But each individual trader should not expect to beat the market, because they don't know if they're one of the lucky ones.