skysight-inc/HackerNews huggingface dataset:
Java and Flash failed to deliver its promise of unbreakable sandbox where one could run anything without risking compromising host. They tried, but their implementations were ridden with vulnerabilities and eventually browsers made them unusable. Other mentioned technologies didn't even promise that, I think.

JavaScript did deliver its promise of unbreakable sandbox and nowadays browser runs JavaScript, downloaded from any domain without asking user whether he trusts it or not.

WASM builds on JavaScript engine, delivering similar security guarantees.

So there's no fundamental difference between WASM and JVM bytecode. There's only practical difference: WASM proved to be secure and JVM did not.

So now Google Chrome is secure enough for billions of people to safely run evil WASM without compromising their phones, and you can copy this engine from Google Chrome to server and use this strong sandbox to run scripts from various users, which could share resources.

An alternative is to use virtualization. So you can either compile your code to WASM blob and run it in the big WASM server, or you can compile your code to amd64 binary, put it along stripped Linux kernel and run this thing in the VM. There's no clear winner here, I think, for now, there are pros and cons for every approach.
Awesome. I will notice when you reply here, no matter when. I routinely check for new replies even to old comments.
May he rest in peace, his name will be remembered and impact felt for long.
Thank you. I learned a lot!
The reputation of the Tata group is not as stellar as it was under the leadership of JRD Tata.

Nonetheless, it is one of the few large industrial groups in India to go above and beyond their commercial interests to look at the interests of Indians as a whole.

I remember the day JRD Tata died. I was still in college then and I had an overwhelming sense of grief over his death. It was a huge loss to lose a man of his caliber and my grief was for the country. With Ratan Tata, it is similar but not on the same scale as JRD.
Islamic geometry is gorgeous. I've a pile of books on my shelf but have never gotten off my backside to recreate some.

Hope to take this as inspiration!
Porch Pirates Are Stealing AT&T iPhones Delivered by FedEx
https://archive.ph/Mwf7e

It seems likely that this is someone on the inside at AT&T is selling tracking numbers to rings of thieves.
ngl I've tried using Rust -> WASM and it's been an awful experience, I'm much much happier with C. Rust generates enormous blobs because you have to include stdlib, and if you don't you don't get any of the benefits of using Rust. I'm probably overrotating on binary size but it sure is nice being able to just read the WASM and make sense of it, which is generally the case for WASM made from C and is absolutely not the case if you're building from Rust.
My Pocketchip Experience in 2024
That literally is a function. I guess the important difference is you can easily confirm by inspection that it is only called once?

If that's an important property maybe it would be worth supporting an annotation on normal functions to enforce that. I guess you could easily write a linter for that.
A problem these days is that the scissors are sculpted.. they fit a right hand. But there are supposedly-left-handed scissors.. except that 99.9% of them are still crossing the blades the same way! My father bought one like that, as he was left handed. The scissors are mostly useless, at least for anything where you need that slight pressure to get a good cut.
I mostly use fineliners too.
Even when I draw models posing "live" (actually on Zoom, most of the time) I do the preliminary sketches with thin, light gray pens, and then when I have the proportions mostly right (or at right as I can) I go in with a dark pen.

Example: (NSFW) https://www.instagram.com/p/C_C5VQZOYVF/?img_index=8
Show HN: Automatic Passkey Upgrade Demo
Hey everyone,

With the latest Safari / iOS / macOS, a new WebAuthn feature "Client Capabilities" was introduced that allows, among others, for conditional creation of passkeys.

For users (right now only Apple Passwords users - more password managers to follow), this features creates a passkey automatically in the background when a user signs in with username + password autofill. In subsequent logins, the passkey autofill is favored / promoted.

So far, there's not many websites that let you experience this feature, so I added a simple one to https://passkeys.eu/automatic-passkey-upgrade

First data shows that this is a massive driver for passkey adoption growth. Once rolled out on more websites, I think this can be the tipping point for mass adoption of passkeys. What do you think?
>I think his idea is that if other competing countries (namely China) won't break up their big tech companies,

I think there's two big things wrong with this. For one China is actually breaking up its tech companies or even culling entire sectors, like education tech, as they do in AI, this kind of argument is basically just American oligopolists inventing a red scare to stave off regulation.

Secondly American companies have a lot of trouble abroad, in gigantic markets like the EU and increasingly India and Japan with stricter privacy regulation on the way because they're so large. So if anything, American anti trust would send a good signal to most markets that the US is in line with global trends.
Throwaway account here, but I think we should be cautious about hero worship.

While it's true that Tata has contributed positively in many areas, there are also significant controversies surrounding his legacy—like leasing coal mines for just 25 paise for 999 years before independence(1), among other issues(2)

It's important to consider both the positives and negatives to form a well-rounded opinion. Let's aim to be informed and objective rather than blindly idolizing anyone.

(1) https://www.firstpost.com/business/a-tata-coalgate-999-yr-mi...

(2) https://www.bhopal.net/the-ugly-face-of-tata/
Java embraced Unicode, and ended up with a mess as Unicode changed underneath it.

You can actually end up in a cleaner state in C++, as there is no obligation to use the standard library string classes, but it's pretty much required in Java.
Hehehe, so the future is how we used to run applications from before the era of the web.
Not as much as you would think.

Russian has terminal de-voicing; so /d/ softens to a /t/, hence сад = /sat/. (Sort of; actually it's something in between, but the shift is noticable).

And /l/ palatizes (becomes /lj/) before both е and ё, as in самолёт. (Actually the /j/ is built into ё of course, but somehow it seems helpful to recognize the commonality of the sounds when realized after /l/ - basically е becomes more yoff-like).

The vowel might differ (one may be more fronted or rounded than the other), but that tends to vary among speakers anyway.

Russian has a whole suite of secondary rules like this.
Ukrainian by contrast is much more phonetic. But unlike English, at least Russian has a system.
I have a different take on this:

It depends on what you're actually building.

For the business applications I build SSR (without any JS in the stack, but just golang or Rust or Zig) is the future.

It saves resources which in turn saves money, is way more reliable (again: money) and less complex (again: money) to syncing state all the time and having frontend state diverge from the actual (backend) state.
I started digital painting as a way to give my wife gifts without having to spend money. I started by sending cartoony things, but had a breakthrough when I saw a CNN story about a guy who made photorealistic paintings on an iPad. They showed a time lapse video of the process and I realized that it started out as a mess and got progressively better.

“I can do that,” I thought.

This was my fifth try:

https://youtu.be/watch?v=HnhMgtO15Pk

https://youtu.be/watch?v=xcvfL0BbLD0

I did some paintings of dogs for friends, too. But in the end I felt I am not talented enough— I can do it but it takes many many hours per painting. Also I somehow don’t feel like it is art.
True Balance is a trusted app offering quick and easy small loans to help you manage unexpected expenses or urgent financial needs. With fast approval, minimal documentation, and flexible repayment options, it ensures a hassle-free borrowing experience. Whether you need a small loan for emergencies or planned purchases, True Balance provides secure and convenient access to funds anytime, anywhere.
> Night shift/2nd shift is a thing.

Yes, of course and definitely I considered as I mention if he/she meant 2nd job, etc. Just the phrasing threw me off as it says 'day', then '10pm' and it's written as if it is a normal occurrence for the majority of the population (which would imply night shift/2nd shift is normal working times for the majority). Just wanted to get clarification from OP on exactly what was meant to satisfy my own curiosity.
> Why doesn’t Bluesky block known keywords and terms like “child pornography” or “cp”?

That's 90s tech and useless today. Not only are long-term accounts never going to post it verbatim (if they want to survive on the platform), it will block both normal communication about the issue and unrelated things (lots of cp in shell scripts). There are way better approaches to detection available.

When anyone tries that anyway, we get the expected results. Like "the event that can't be mentioned" and "unalive" on YouTube.
I mentioned it above, I think art of wei on YouTube is really good, even though I haven't gotten very far yet. maybe you'll find him useful.
The MVP for this component was on the form to start an application for a restraining order. The design team fully explain their rationale and research on the project Github.

https://github.com/alphagov/govuk-design-system/discussions/...
Absolutely. This would solve the above problems, plus any problems involving JavaScript bugs that would render the whole thing inactive. Just a shortcut to go to the root of the site seems appropriate. Or maybe sites could configure themselves for a "safe site" equivalent if their whole content is a risk.
Upon reading the Hopfield paper back in 1982, I concluded that it's not worth it to pursue a physics career, and more efficient to put the effort into AI research, as at some point the AI will solve all the remaining science problems in a couple of milliseconds. I might have erred by a few decades, but overall seems like we are on track.
More and more reliably.

When people have an abo that cannot be quit every month it gives more financial security to the company.

Previously people would buy e.g. the creative suite from Adobe and then work with that version for many, many years to come
Though when it comes up in the book it's clear that it was a mistake (or a cruel joke) in that context.
Atleast for drawing/painting/etc, there is no natural talent - you work your ass off practicing, and that's about it. You don't need talent, genetics or money. You don't need art school or classes. The biggest issues beginners have is thinking they lack talent, thinking there's some secret tricks/hacks of how to get better, thinking they need expensive materials/tools. You just need practice.

Here is some advice:

1. "We all have 10,000 bad drawings in us. The sooner we get them out the better." You'll make some ugly, terrible drawings, even if you put in your 100% best effort, that you just look at and feel terrible and want to give up and quit. It's very important you know you aren't lacking talent, that's what everyone goes through. You're making improvements even if you don't know it. Eventually, you'll make something that makes you go "wow.. this actually looks good", and that will happen more and more often until its just normal.

2. Art skills transfer hugely between mediums, so don't stress about picking digital art or painting or drawing/etc. Your effort in learning one is also making you better at the others. Switch between them, try different ones, focus on only 1, whatever you feel like.

3. Everyone is different. You may have a different preference or style of what you enjoy, do what works for you.

4. Follow some artists you like on twitter/artstation/youtube, look at their art, if you want to make art like them: try to copy it, if they show their process try to copy that.

5. You don't need to "Draw every day" or "do 1 hour of study/drawing boxes every week", if that style suits you and you enjoy it great. But it is not needed, and you don't need to do it. Draw whenever you feel like it.

6. There are no rules. Use what you want, draw what you want, mix mediums, you don't have to do things like studying old masters or drawing 100 boxes.

7. My biggest biggest advice is: there is no secret or missing ingredient, just keep practicing - and secondly, draw what excites you or what you enjoy.

Here's some random youtube channels:
Charcoal: https://www.youtube.com/@MadCharcoal/videos

Gouache: https://www.youtube.com/watch?v=6K6snXJg_aU

Digital art: AhmedAldoori sinixdesign Lighting Mentor

Oil Painting: https://www.youtube.com/@paintcoach
https://www.youtube.com/@FlorentFargesarts https://www.youtube.com/@DrawMixPaint

Acrylics: https://www.youtube.com/@JansenArtEducation/videos

The grand wizard of figure/gesture drawing, Glenn Vilppu (search on youtube)

Steve Huston

I personally don't like paid courses (such as NMA), as they are often obnoxiously long and drawn out, and there's no magical secrets hidden in them. Generally you can find all the same instruction on youtube, just not as structured or organized. However, if you can stick to a long course and do it diligently, it's worth trying.
> Please stop with the insulting ad-hominems, it contributes nothing to the discussion and just promotes anger.

If you believe that this was an attack against you rather than the position that you yourself have laid out in these comments, it's time for some self-reflection.

Your commentary drips with disdain for the people you're ostensibly serving and it's as obvious to them as it is here.

Even in this comment, you don't care to examine why some people have a preference for WordPress, because you believe there's a better option. Truly the behaviour of the stereotypical arrogant developer.
Hi. Thank you so much for sharing your experience. As I mentioned, I’m quite new to this, and your answer brought up some important questions I hadn’t considered. I believe it would be best to discuss these further with the clients.

Would it be alright if I reached out to you via email in the future if I have any additional questions? I noticed your email in your profile.
> I don't have a dog in this fight

Neither do I, I was simply comparing them from a Bayesian point of view. There is indeed no "smoking gun". What you say about the citation is possible but I estimate that it's more likely he had a physical copy (I would change my mind about that if we found out he had indeed contacted the authors for citation information).

Also, Sassaman has some important points in his favor that Peter Todd lacks:

1) he is dead. I find it unlikely that Satoshi is still alive and even more unlikely that he is still alive and very publicly involved in Bitcoin.

2) strong connection to one of the white paper's citations

3) cares a lot about privacy/anonymity, e.g. he tried to convince Bram Cohen to release BitTorrent anonymously

But he also has some points that work against him: not being known as a Windows C++ programmer, his wife not believing him to be Satoshi, etc.

Overall I feel Sassaman is more likely than Todd, but I am not convinced he is Satoshi.
> I frequently hit Fn instead of Ctrl and don't realize what's happening until I look at my keyboard. And that's not when I'm in distress. Same goes for middle click. It's not a consistent interaction.

Triple Shift that you can only on a single website is worse since you're even less likely to be able to use it in distress

Besides, as a site you can try to add typo-similar combinations for your "hide" action (like alt+w or win+w) instead of creating a totally different one
Well look at that, maybe I'll get a shack.
I've not seen the code, but the author has written a book [1] which has the advice I've ever seen. Much better than "Clean code" and other books in that direction. So it does not surprise me that the code is so well written.

[1] https://milkov.tech/assets/psd.pdf
Ditch teachers and learning. Draw whatever interests you: tits, cocks, trucks, old boomboxes, celebrities. Don't focus on creating but use drawing as a method for you to see better and looking at things more carefully. If you develop as an artist, that will be a bonus, and you'll develop into an artist of your own kind. No need to force or motivate yourself into learning. And if you lose interest, just change a subject. Don't treat art as a discipline.

Try to draw the same thing more than once. For example next day without seeing your older work. You'll be amazed of how your drawings get better and better.
Edit to say: thanks for your answer. I'll preserve the rest since I still think wheels are being reinvented here.

Bridging state across requests is not new. If "the new CGI" means more efficiently sharing state between requests, that's a really arbitrary qualifier and is not unique to WASM or serverless or anything like that. The article is myopic, it doesn't take into consideration what is established practice done over and over.
I'm honestly not informed enough to comment, but everyone seems to agree there is really bad mismanagement at Lockheed & co + the incentives as set up are truly fucked up (I remember reading on that, but don't have the source handy) and actively encourage manufacturers to pile on costs to make more profits.

If there's good R&D and first-order thinking in the mix, one order of magnitude does not seem insane to me. It's a cliche, but look at what Elon Musk has achieved, everyone said it couldn't be done, but it happened.

Ultimately other things can help, like designing new innovative form factors and cathering to a changing reality (it's doesn't make sense to shoot down 50k$ drones with 1M$ missiles).
> If gross sales is literally the only important metric in software engineering we've already failed.

It literally is the only important metric is commercial software development. Not sure how you could delude yourself into thinking otherwise.
Could also be due to right-handed tools. Chainsaws...
Even some biologics have cancer as a potential side effect. You get to sign all kinds of fun waivers before you get a prescription for them.

When the alternative is degenerative illness like psoriatic arthritis, sometimes you just have to roll the dice.
Anyone have a proper solution to the issue of wealth re-distribution? This is a fairly novel problem, and I think the government is neither equipped nor competent enough to handle hundreds of billions of dollars in new tax revenue (as some propose) while at the same time, why should we be comfortable with private actors deploying this kind of capital at this scale
I have a sudden new appreciation for the Lincoln Memorial.
I totally agree, as I took that course during University of Toronto undergrad (either 2013 or 2014) when [Sir?] Geoffrey Hinton decided to flip (this is an official term) the course to have it that we watched the Coursera video course of what is linked above, and ask questions in class. It was extremely hard to understand the course material, and I dropped out a few weeks into it after the first unit test. It is probably one of the most awful introductions to neural networks that exists, and that's why the "go-to" ML courses are ones by Andrew Ng, Jeremy Howard's fast.ai, and others. But to be fair, the class was very math-heavy in terms of the actual underlying implementation of neural networks, and I seemed to be an exception in that class of about 50 or so students (many seemed from the master's program) who simply could grasp much of the math behind it (I'm sure anyone who understand the course material could implement neural nets at a CUDA level).
These sites still exist, this is how I started: https://line-of-action.com//
I agree. If Matt was smart, he would have spent the last ten years maintaining his advantage rather than ignoring the problem. Now that he's backed into a corner and forced to get real nasty to survive, I can't believe how much tech people are falling over themselves to shill for the slimy salesman organization. Only tech is like this. Folks like union workers would lay down their lives before crossing a picket line. But the concept of solidarity is completely lost on tech workers. No one turns against their own like us.
Analogues of this have been playing out in other industries for some time. The legal incentives strongly bias the outcomes toward it not being possible to own these products, only rent them. At a visceral level I don’t like it but at an intellectual level I understand why it is the only plausible way forward. There is no easy solution.

In automotive, it is common for there to be a requirement that software is supported to some degree for 7-15 years. In practice, this is extremely expensive to guarantee but no one wants to pay for the cost of a reliable guarantee. The industry is at an impasse with consumers and it manifests in situations like this article.
This question could not be more academic
except that WASM has a huge classloader / linker problem: It's still very hard to combine two wasm files into one and get the memory merger right. Maybe component model can fix it but it comes with so much bloated nonsense that an adaption in Safari might take forever.
> Microsoft uses it today for C#/Blazor. But it isn't the correct approach as dotnet in browser will likely never be as fast as Javascript in the browser.

Might be true, but both will be more than fast enough. We develop Blazer WASM. When it comes to performance, dotnet is not the issue
The actual regular expression implementation in Rust is going to be fast, but one of the things that caught a reddit poster out only recently was that the Rust regex crate's parser doesn't magically cache, so if you sit in a tight loop making the same regex over and over, it'll do all that work over and over, whereas the Python code might take ten times longer to do it once, then caches it, it doesn't take long for that to end up faster.

Now, if you're going to use RegexSet you're also smart enough to read "For example, it’s a bad idea to compile the same regex repeatedly in a loop" and say "Yeah, makes sense, I will not repeatedly compile the same regex". But some fraction of Python programmers won't read that - and it'll be very slow.
Except with runtime safety, no installation process, no pointless scare popups when trying to run an app directly downloaded from the internet, and trivial distribution without random app store publishing rules getting in the way.

In a way - yes - it's almost like it was before the internet, but mostly because other ways to distribute and run applications have become such a hassle, partly for security reasons, but mostly for gatekeeping reasons by the "platform owners".
You can probably optimize JS to run as fast in most cases.

What actually WASM brings is predictable performance.

If you're JS wizard, you can shuffle code around, using obscure tricks to make current browser to run it really fast. The problem is: JS wizards are rare and tomorrow browser might actually run the same code much slower if some particular optimization changed.

WASM performance is pretty obvious and won't change significantly across versions. And you don't need to be wizard, you just need to know C and write good enough code, plenty of people can do that. Clang will do the rest.

I agree that using WASM instead of JS without reasons probably is not very wise. But people will abuse everything and sometimes it works out, so who knows... The whole modern web was born as abuse of simple language made to blink the text.
I suppose the better term would be synecdoche, since the similarity in pronunciation isn't coincidental, like "The sun rose in the morning." and "Look at the pretty rose petals." but is a form of motivated polysemy.