skysight-inc/HackerNews huggingface dataset:
>Python is absolutely terrible to use as a stand alone language.

Follows from the others.

>Almost everywhere it is used (ML, Data Science, Scientific computing, etc.) it is used to call C or C++.

See the big libraries in those fields. Do you think tensorflow or numpy are native python. If you are using python for scientific computing you will be using libraries which call out to native code.

>The amount of serious Python software that doesn't makes extensive use of calling to other languages is very small.

Given the above and that Python is most prominently found in those fields it seems pretty certain. There is standalone Python software, but usually only as a replacement for shell scripts or for relatively small applications.

>Python alone has very severe shortcomings

To name a few: GIL, lack of common default types (e.g. C like integers), enormous interpreter overhead, no mandatory typing (which introduces a whole range of runtime errors impossible in strictly typed languages). These alone make it totally unusable for many applications, unless you call to an external library.

>that make it totally unsuited for stand alone development.

See above.

>Python is absurdly slow, for naive array task you can easily get a 100x to 1000x speedup compared to any native language.

Personal experience.

>The GIL doesn't really help either...

It really does not...

>Right now AI is big, Python is at the center of that, to glue C++ together...

See e.g. what numpy, tensorflow, pytorch are written in. Spoiler, the matrix multiplication isn't implemented in python.
In a sense the secure platform already exists. You use web apps as much as possible. You store data in cloud storage. You restrict local file access and execute permissions. Authenticate using passkeys.

The trouble is that people still need local file access, and use network file shares. You have hundreds of apps used by a handful of users that need to run locally. And a few intranet apps that are mission critical and have dubious security. That creates the necessity for wrapping users in firewalls, vpns, tls interception, end point security etc. And the less well it all works the more you need to fill the gaps.
French Jew here.

I agree that our social, educational and cultural institutions are doing an absolutely atrocious job of integrating immigrant populations.

Despite that, I find that most people I know from the Maghreb are actually quite well integrated, mostly because as an educated, well-to-do person I hang around with other educated, well-to-do people and they tend to be quite nice to get along with.

I grew up in Houston (arrived age 6, left just before my 18th birthday), and honestly I find the way 'native'/anglo Texans treat Mexicans (more properly, Hispanics, but over there everyone calls them Mexicans) to be probably slightly worse on average than the way French people treat people of African descent.

However, the French welfare state + my god our educational system is so fucked it's not even funny mean that it's possible to get certain pathological cases where an immigrant will move to France, live off the welfare state while railing against everything French (post-colonial hatred) and then use that sweet welfare money to plan and execute terrorist attacks.

I don't blame that one the innate character of French people though, just on badly designed social institutions. Our current welfare state was modified by well-meaning leftists who were aiming to make something more egalitarian, but instead made everything worse, and then modified by well-meaning neoliberals who were aiming to make something more efficient, but instead made everything worse, and now it's starting to look like a big ugly pile of legacy code written in Perl.
Panics are safe though (they're a controlled crash). The safety we're discussing is not related to program stability.
The irony is, Tcl stands for Tool Control Language, it was created to control the EDA tools of the time. So it is no coincidence, that it is popular in the EDA world. I,for myself, quite like it for the intended tasks.

The other irony is, considering that article, that the Cadence analog tools (Virtuoso, Allegro) are using a nice Scheme dialect called "Skill" for that purpose. So not the whole EDA world is centered around Tcl.
Totally agree, not at all obvious what’s gonna happen once you paste something.
In this context… well.

I'm going to Rot13 this so I don't make people faint.

Vg'f jurer gur fxva vf gbgnyyl erzbirq. V haqrefgnaq guvf vf gur svefg fgrc va n erny znyr-gb-srznyr traqre punatr bcrengvba, bayl va guvf pnfr vg jbhyq or n fhecevfr naq jvgubhg nanrfgurgvp
That's interesting - do you have any more info on this special passport zone, or travel to the west being generally not possible?

Yugoslav passports from 40 years ago are widely regarded as being one of the most powerful passports ever, with visa-free travel to almost all Western states [0].

[0]: https://www.reddit.com/r/MapPorn/s/o7mJrRuWOu
AIXItl is a formally described AI. Not an AI you'd want, and not an AI you could really build, but it's there.
It wasn't software update. It was signature database update. It's supposed to roll out as fast as possible. When you learn about new virus, it's already in the wild, so every minute counts. You don't want to delay update for a day just to find out that your servers were breached 20 hours ago.
dmca is federal. it's worded in a way that you can be trialed for anything at all if there's a will on the software author side.
That doesn't quite explain why this is not a problem in European countries.
usememos.com?
The curse of early-and-good-enough systems. It's the same for bash and a few other things. Not enough pain points to replace them even though there's lots of better alternatives.
> 2. Python, though great, has a global interpreter lock. TCL fits in with threaded programs excellently. This can be a make-or-break feature.

Tcl's threading and event management are indeed standout features. It excels in threaded programs, thanks to its robust C API, especially functions like Tcl_ThreadQueueEvent ( https://www.tcl.tk/man/tcl9.0/TclLib/Notifier.html ).
Ah that was me. We don’t accept “content updates” and they are staged.

We got this update pushed right through.
Groceries and cleaning come to mind. To be honest it is a very minor inconvenience but I have been looking for an excuse to get my hands dirty with reverse engineering a circuit. The problem was just annoying enough to act as a motivator.
Few links for you:

TPOT: https://knowyourmeme.com/memes/subcultures/tpot-postrat
SCHIZO: https://knowyourmeme.com/memes/schizoposting
what would they gain from this?
The US government has given it's stamp of approval, and a big push to install such solutions.

FedRAMP-authorized: CrowdStrike's cloud-delivered solution meets the strictest federal standards.
DoD IL5-authorized: CrowdStrike's solution is approved for use on the Department of Defense’s (DoD) Impact Level 5 (IL5) systems.
JAB High-ready: CrowdStrike's solution is validated, tested, and certified for use in hybrid, multi-cloud environments, meeting the Joint Authorization Board (JAB) High requirements.
OMB Memo M-22-09: The Office of Management and Budget (OMB) mandates a Zero Trust security approach for Federal Civilian Executive Branch (FCEB) and DoD systems.
OMB Memo M-21-31: The OMB directs investigative and remediation capability improvements.
Well they were being given prescriptions (still are) for the location & frequency in Latin, in a way why use Arabic numerals?
> False, It is usually the #1 consideration

No, it is not, or the prison system would be structured entirely differently. Courts do not have the power to affect that.

> E.G. You think someone is likely to reoffend so you lock them up longer. not because you think it will offer more rehabilitation, but because it incapacitates them for longer.

The reality is that this is unproductive when it comes to reducing crime.

> 3 strikes laws are a classic example of this. You dont give someone a 25 sentence because thats how long it takes to rehabilitate them. you do it because you think they are a serial offender you want to keep off the streets and they are unlikely to be rehabilitated

The reality is that this too is ineffective at reducing crime.
"Blast radius" seems... apt.

It would be rather easier to understand and explain if it were intentional. Likely not able to be discussed though.

Anyone able to do that here?
The US prison system is demonstrably awful at reducing reoffending.
Well now we know those agencies are either morons or in on something we don’t know about.
> IJ probably developed out of ii, representing a long [iː] sound [...]. In the Middle Ages, the i was written without a dot in handwriting, and the combination ıı was often confused with u. Therefore, the second i was elongated: ıȷ. Later, the dots were added, albeit not in Afrikaans, a language that has its roots in Dutch. In this language y is used instead.

> Alternatively, the letter J may have developed as a swash form of i. In other European languages it was first used for the final i in Roman numerals when there was more than one i in a row, such as iij for "three", to prevent the fraudulent addition of an extra i to change the number. In Dutch, which had a native ii, the "final i in a row elongated" rule was applied as well, leading to ij.

> Another theory is that IJ might have arisen from the lowercase y being split into two strokes in handwriting. At some time in the 15th or 16th century, this combination began to be spelled as a ligature ij. An argument against this theory is that even in handwriting which does not join letters, ij is often written as a single sign.

So indeed maybe the same as the Roman numerals. Interesting, I didn't know this. (Also interesting that no one really knows where this letter came from.)
Given there is zero chance that I will ever serve on a US jury given I don't live in the US, it's not a concern for me. But good tip for anyone in the US who might want to do it.
I was being tongue in cheek about that one. Winning/losing, nah its not about that. Its about whetting one's curiosity and to be filled with wonder about human's accomplished with a strange attractor on scatological humor.
There is another currently new hacker news thread [1] referencing this post [2] where the influence of the performance of the GIL is evaluated. It seems not so large, of course depending on the tasks performed by the interpreted part.

At a former workplace we had a C/C++ application which allowed integration of customer code via TCL which worked well and had acceptable performance even with the TCL code in a hot path of the application code.

Inspired from this I once did a C/Perl integration, but the Perl code was minimal (just user exists with special case handling) and Perl is another language disliked by many today. But the program was written around the 2000 and Perl was more widespread without additional installations on the target systems and far better than any ksh/sed/awk combination.

But it worked well too.

[1] https://news.ycombinator.com/item?id=41006946

[2] https://www.maartenbreddels.com/perf/jupyter/python/tracing/...
And in English as well. German "tag" (as in "guten tag"), to Old English "daeg" (with the g pronounced as a y), to Middle English "day".
Why would complex numbers in particular deserve to be a native type?

What about quaternions, or vectors and matrices of sizes 2-4 at least?

Is there any real advantage over just using a struct?

Would MultiArrayList help with performance for complex numbers and vectors?
What digital protections did the kid circumvent? As far as I can tell he just dumped the game's graphics and found a previously unknown creature among the results. No circumvention of anything whatsoever, just direct access to the data.

If the corporations don't want stuff like this to be found, they should try not putting it into the game in the first place. I guess copyright monopolists who are delusional enough to believe they can publish information world wide and control what happens to it do not have this sort of common sense.

For the record, there's an entire website full of people dedicated to doing what that child did:

https://tcrf.net/
No, it wasn't. Crowdstrike denied it had to do with zeros in the files.
pdf/ps can easily be created in a way that data for text and qr code fields are easily in plain text. seems like yall focusing too much on the higher level tools instead of what's right in front of you.
Possible? Yes. Likely? No.
Smelting some iron is not that hard. You just burn special mud using coal and collect iron drops in the ashes afterwards.

Producing cheap iron is hard.
This is false. The US does not interfere with Cuban internal economy nor does the US Cuban trade embargo prevent Cuba from trading with other countries. Cuba’s disastrous economy is a direct consequence of the policies of its communist government, not external forces.
Disguises the reviews for the apps that actually did pay them for reviews.
This presumes an organized resistance. That's not what I was talking about. I'm surprised there aren't more regular reactions out of sheer anger, like the BLM riots.
The problem here was that the kernel process got a fault, so a panic wouldn't have made a difference.
> can provide links if you're interested

Please do :)
Cool! I built something very similar but for Windows a while back: https://syscalls.win
common people don't talk about plain text. what are you? a hacker?!?
catch_unwind doesn't catch all panics. I imagine that running a thread would actually catch all panics, but I don't know enough about the subject to say that confidently.

https://doc.rust-lang.org/std/panic/fn.catch_unwind.html#not...
Ok, why would you want plastic to decompose in 2 months? What about shelf life? Will I need to worry about my packaging decomposing?
errr...

okay I'm Jewish, and I think you're over-simplifiying when you say

> Anyone who says 'anti-Zionism isn't antisemitism' is antisemitic

For example, you can find here:
https://tsedek.fr/

a (French) collective of Jews who oppose Zionism on anti-colonial grounds. I don't personally agree with them (my own views are more accurately summed up here:
https://arielche.net/Lydie.html
)
but I do think that it is possible to have a logically coherent worldview that says "Jews are to be respected and treated like any other human, but the state of Israel should not exist".

Personally, I don't believe that, I believe the state of Israel should exists, although I believe that bombing your neighbors is actually a piss-poor approach to national security, and honestly buying off the Palestinians by building them schools and hospitals is a lot cheaper in the long run than killing them with expensive jet fighters, but I don't go around accusing every anti-Zionist of anti-semitism.

I know some anti-Zionists personally, and they're what I'd call humanist, who believe the basic idea that, to quote Jefferson, "all men are created equal and they are endowed by their creator with certain unalienable rights,... life, liberty and the pursuit of happiness".
reminds me of a ticket I once worked on, no emergency or anything, I just needed to crank out a few pages of cobol, it took a little while to type it in, and the boss of the department wanting the ticket done came by and asked what the holdup was, "I'm working on it, will be ready in a bit", the boss asked "what, don't you just need to press a button or something?" she too "lead a department." hahaha
Just had a peek at allaboutberlin.com. Pretty, thankfully slim and what I've seen (just glanced over the housing section) solid advice. You deserve some price for that.
Now that this is being discussed and nvidia is finally phasing to an open source kernel implementation can we get MS and mainstream Linux distributions to shun away kernel extensions like Apple did? Software like crowdstrike, anti cheat and all operate like rootkits and basically own your machine. Go user space or go home.

Allow it but make it hard. Put lots of warnings. Require enrolling custom keys.
Have you tried looking at your problem from different standpoints and with different ways of thinking? Have you tried to understand the ways in which your listeners are thinking about things?
I'd pick a SaaS category with plenty of existing (non-VC) incumbents, and build something better that I personally have experience with using, just as I did in 2021.
He probably means work was sent offshore to offices with cheaper labor that's less skilled or less vested into delivering quality work. Though there's no proof of that yet, people just like to throw the blame on offshoring whoever $BIG_CORP fucks up, as if all programmers in the US are John Carmack and they can never cause catastrophic fuckups with their code or processes.
This incident, the blue screen of death, is exactly the same as a panic.
We've fixed this issue on the Firefox side ~2 months ago. Here is the bug: https://bugzilla.mozilla.org/show_bug.cgi?id=1897379

It's possible that you have an extension installed that blocks e.g. Twitter's CDN. We've seen issues like that with the Disconnect Firefox extension.
The important part there is the termination characters. "Dollars" / "Pounds only" etc. and the decimal point (though that's easier to turn into a comma and make into thousands... Funnily enough the German way of using comma as the decimal separator avoids this)
> Panics are safe though (they're a controlled crash).

Here's Linus's commentary on that:

https://lkml.org/lkml/2021/4/14/1099

> I think that if some Rust allocation can cause a panic, this is simply _fundamentally_ not acceptable.

> Allocation failures in a driver or non-core code - and that is by definition all of any new Rust code - can never EVER validly cause panics.

Panics are not acceptable in countless contexts. Plenty of things need to be written to keep working through entire categories of errors. The casual attitude of Rust developers towards error handling is one of the many reasons people have trouble taking it seriously. Reliability and robustness is generally more important than language memory safety for almost all contexts.
No big company is going to agree to the terms and conditions that are listed on their website, they'll have their own schedules for indemnification that CS would agree to, not the other way around. Those 300 of the Fortune 500 companies are going to rip CS apart.
Let's blame the dev who pressed "Deploy"
With modems in modern cars, a car manufacturer could absolutely monitor wire resistence and "shut down" a wire remotely. Most people would agree however that's unnecessary and invasive.
I recall Ada being strongly pushed, but at the time you needed a top of the line workstation ($60K - 100K in early 1990s dollars) and the per seat license for the compiler and other tooling was another $100K. And that was aside from the much longer/harder path to getting to a solution. We had two teams implement a system - one in C and one in Ada. The teams didn't know they were in competition with one another, but the much less experienced C team completed their solution so much faster than the Ada team, that they just dropped the Ada effort as unrealistic for use outside of specialized aerospace.
> Who said that? What is that even meant to mean?

You used the risk of vigilantism as a reason for the brutal treatment of prisoners.

> What the government can do to stop me from doing that is give me a credible promise of punishing the man for me.

They can also give a credible promise of punishing would-be murderers like you for that kind of vigilantism. There is no evidence to suggest that shorter sentences leads to more vigilantism. Zero. It's something you've made up to justify a barbaric, immoral treatment of prisoners.

> If anything, its the Scandinavians who are unique.

Strawman. The argument was not about everyone going as far as Scandinavia, but about not going to the other far extreme like the US.

> Go to Africa, Asia or South America and you'll find that criminals are given harsh punishments

And yet no single other country worldwide imprisons a large proportion of its population than the US. The US is worse at this than the most brutal authoritarian dictatorships.

> In fact this is more or less true in most of Europe as well

Nowhere near the US extreme.
That is insanely cool!
I've heard countless war stories from older ex-yu people about Galaksija and the early beginnings of the tech scenes on the territories, even about setting up the first proper internet connections and servers with war blasting around them. It's insane when you remember that was all happening not even 30 years ago.

To those who can, I'd suggest donating to the mentioned museum - I've had the blessing to visit it once and it is such a cultural treasure - they don't just collect old machines, they also inspire generations by teaching them coding, electronics and everything in-between.
> I hope this sort of thing humbles them a little.

What I hope, is that they stop to exist as a product and as a company. They have caused inconvenience, economic damage in global scale and probably also loss of life, given that many hospitals, ER units had outages. It has been proven that their whole way of working is wrong, from the very foundation to the top.
On embedded systems you probably shouldn’t allocate at all.
grammarly but local? given that grammarly started way before heavy llms, i assume there's none of that here also?
Panics are only safe if you have an OS to catch you. They are definitely not safe in the CS context.
I don’t like the “drives up the cost of health care” argument because the same argument can be used to outlaw motorcycle or horseback riding, or anything else that’s a higher risk activity. Do we as a society actually want to do that?
India: Democratize E-Commerce
Yes, they are griping because those cities already house most of Americas immigrants: https://www.pewresearch.org/short-reads/2020/08/20/key-findi...
See https://docs.zettlr.com/en/core/readability/
Zig doesn't (and never will) have operator overloading, so using any user-defined numeric types is awkward.
It also already has vector types.
Panics in a user-space application are likely safe and the correct thing to do.

Panics in a real-time system or a kernel are quite possibly not.
Some of the most reliable software I use is written in C. Software I use for decades and which never crashed for me. I can't say this about much other software.

Clearly, you can write shitty software and this is also far too easy in C, but there are also many tools and techniques one can use to write reliable software in C. Rust is also a tool that can be used to write more reliable software, but it is not clear to me why this should suddenly make the big difference. People who want to write bad software can also sprinkle "unsafe" everywhere, and I would guess that this one happens a lot more once Rust is adopted more. And in the CrowdStrike case, Rust's default behavior to panic might not have necessarily prevented the problem.

Having said this, regarding security against malicious hacking, memory safety is indeed one important component and Rust clearly has an edge there. In terms of general software bugs, it switching to other languages than C/C++ is certainly not a magic bullet and I often doubt that it would even an improvement in most scenarios.
Besides the point, but are there any deployed Itanium systems left? They seem to have fizzled out somewhere around the 2010s.
How often do you think RCE vulerabilities are dropping on enterprise machines that already have vectors for security (firewalls, password policy, software install policy, etc)?

I understand cybercrime is real, however I highly doubt the amount of real time RCE exploits leaked into the wild executed within 2 hours is > 0.01% of the updates pushed by CrowdStrike.
In my limited experience, I thought any serious fuzzing program does test for all "standard" patters like only null bytes, empty strings, etc...
Something like ebpf.
Can you please share your Astro + Netlify blog's URL?
It's not the shortest lambda term with that property though. That's λx λy λz. x z (y (λ_.z)) [1]

[1] https://en.wikipedia.org/wiki/SKI_combinator_calculus