skysight-inc/HackerNews huggingface dataset:
Try imagining trait AlwaysIndexableUnder100. There's a generic codebase/library that takes in types that implement that trait, and do indexing with indexes that are always below 100. Like `usersCustomSliceA[4] = usersCustomSliceB[5];`

You'd be tempted, for performance, to use `get_unchecked` methods that skip the boundary checks. After all, the trait says that this should always succeed.

However, if the user passes in a type that is not indexable with integers smaller than 100, whose fault it is if the program segfaults? The users? But they managed to get the program to segfault _without_ writing unsafe code. The provider of the library? They are using `unsafe` to call `get_unchecked` after all.

Bingo. It's the library dev's fault. The API they provide is not sound. However, they can make it sound by marking the _trait_ unsafe to implement. Then the user needs to type `unsafe` when implementing the trait for their type. "I solemnly swear that this type is actually indexable with all integers smaller than 100." That shifts the blame to the mistaken implementation, and the user is to blame.

It's the same situation here. Deref is not unsafe to implement. That's why if you need to uphold a trust boundary, you need an unsafe trait.

So, the whole thing doesn't account to crossing the boundary willy nilly, a big point of Rust's unsafe is for the compiler to force documenting and checking for accountability: who is required to do what, and who is allowed to rely on that.
> At first glance they may be less obvious, but they are significantly more discoverable. \? Just shows you all of them. In MySQL it always feels like I need to Google it.

In MySQL either `?` or `help` or `\?` will show you the help...
How is Esmeralda funded?

Esmeralda Land Company is backed by patient, values-aligned investors

OK, who are they?

Edit: Did some more digging, found this: https://www.healdsburgtribune.com/edge-esmeralda-my-experien...

"The most well-attended talks were led by top researchers and CEOs from sectors like cryptocurrency, AI (artificial intelligence) and neuroscience."

Oh no.
Wow Tether transactions are half as likely to be involved in illicit activities vs fiat transactions? Who knew! Thanks for sharing.
Sounds like they learned the source material well
Also, I haven't really found anything that says losing fat faster than 2 pounds per week (and realistically it's not possible to lose more than like ~2500kcal/day * 7 = 5 lbs per week even when 100% fasted) is actually unhealthy. Studies show it does not make it any more or less likely that you'll regain weight if you do it fast vs slow. Folks say this but I'm not sure why...

This study says you may get a better body composition if you do it slowly, but also resistance training during weight loss helps prevent 93% of muscle mass loss. [1, 2]

This study says fast loss means more loss, and is actually better for long-term maintenance. [3]

Due to the risk profile of obesity, and this is not medical advice, I think there's a lot of room to take more risk if it helps get you back to a normal weight. The consequences of not are just too high.

[1] https://pmc.ncbi.nlm.nih.gov/articles/PMC5702468/

[2] https://pmc.ncbi.nlm.nih.gov/articles/PMC5946208/

[3] https://pmc.ncbi.nlm.nih.gov/articles/PMC3780395/
So PyPI acts as keyserver, and basically a CSR signer for sub-CA wildcard package signing certs, and the package+key mapping trusted authority; and Sigstore acts as signature server; and both are centralized?

And something has to call cosign (?) to determine what value to pass to `twine --attestations`?

Blockcerts with DID identities is the W3C way to do Software Supply Chain Security like what SLSA.dev describes FWIU.

And then now it's possible to upload packages and native containers to OCI container repositories, which support artifact signatures with TUF since docker notary; but also not yet JSON-LD/YAML-LD that simply joins with OSV OpenSSF and SBOM Linked Data on registered (GitHub, PyPI, conda-forge, deb-src,) namespace URIs.

GitHub supports requiring GPG signatures on commits.

Git commits are precedent to what gets merged and later released.

A rough chronology of specs around these problems:
{SSH, GPG, TLS w/ CA cert bundles, WebID, OpenID, HOTP/TOTP, Bitcoin, WebID-TLS, TOTP, OIDC OpenID Connect (TLS, HTTP, JSON, OAuth2.0, JWT), TUF, Uptane, CT Logs, WebAuthn, W3C DID, Blockcerts, SOLID-OIDC, Shamir Backup, transferable passkeys, }

For PyPI: PyPI.org, TLS, OIDC OpenID Connect, twine, pip, cosign, and Sigstore.dev.

Sigstore Rekor has centralized Merkle hashes like google/trillian which centralizedly hosts Certificate Transparency logs of x509 certs grants and revocations by Certificate Authorities.

W3C DID Decentralized Identifiers [did-core] > 9.8 Verification Method Revocation : https://www.w3.org/TR/did-core/#verification-method-revocati... :

> If a verification method is no longer exclusively accessible to the controller or parties trusted to act on behalf of the controller, it is expected to be revoked immediately to reduce the risk of compromises such as masquerading, theft, and fraud
Very high quality anti-China propaganda. You don’t need China to make the precursors for fentanyl in necessary amounts.
> he has invented about half a trillion dollars worth of good ideas, most of the value has been captured by others.

You can't tell me with a straight face that this line is talking about paying the bills? "Most of the value has been captured by others"?

The man thinks about open source in terms of value captured rather than value contributed. He seriously thinks that success in open source is measured by the market cap of the attached for profit.

This is as transparent a window into Matt's psyche as I hope we'll ever get, and if you're still buying his lies after reading this I don't know what else to tell you.
You can do that in rust. Yes, you probably will have unsafe blocks. You can even write "C like" rust code that has a bunch of unsafe blocks but you'll benefit from better tooling. But maybe I misunderstand the article and there is somehow an implication that unsafe blocks are bad?

When I was doing some embedded development using rust it was actually a great experience, with hal and pac crates available already for a lot of hardware or easy to generate.
I've got a typescript react component library that integrates 3 different projects together. It gets 36k downloads on npm every month. I started the project 5 years ago.

When I originally wrote it, I knew that I would have to maintain it over time, so I wrote a ton of unit tests that mostly were just snapshots of the html output. I have two choices, running through my relatively complicated example app by hand and verifying things still work, or writing tests. I used this project to prove to myself that tests are indeed valuable.

Over the years, I've made many releases. The 3 projects have been independently upgraded over time. The only way that I would have kept any sanity and been motivated to even work on this project (I no longer even use it myself!), is the fact that it takes almost zero effort to upgrade the dependencies, run the tests and build a release.

If there are too many things to fix, I just wait for the community to eventually submit a PR. The best part is that if they break something, it is easy to spot in the snapshots (or test failures). I can almost accept PR's without having to even read them, just because the tests pass. That's pretty cool.
There's no money to hoard. It doesn't really work like that.

Companies like this are usually run as a barely sustainable ponzi scheme. Any money they might have had is long gone. They're paying your September revenue with money from their October sales, and they plan to pay your October revenue with money from their November sales.

Then suddenly their sales take a big hit, perhaps because a big merchant left, or perhaps because of a general economic downturn. They still need to pay out their other merchants' October revenue, but their November sales are not enough to cover it. What happens is that they announce that from now on, payment terms will be net 60 instead of 15 or 30. This is the first big red flag. The plan is to wait for December sales. Maybe that will solve the problem in the short term. Maybe it won't, and if it doesn't, by January everyone is in deep shit.
It's probably not a coincidence your allergies are better when you're active. You're body wants to spend a certain amount of calories each day regardless of what you do, and if you are not active or happily pumps excess calories into your immune system.

Some autoimmune disease are significantly improved with regular exercise
It looks like this is focused on server rendering HTML, no client-side runtime or anything like that.

I don't see any used of a `Script()` function or similar in the example apps, though you could always chunk some JS in a public directory and link it in the HTML.

They do have a starter example that uses HTMX. That'd be my go-to as well for a tool that's sticking with server rendering HTML.
“Everyone is excited” but the share of papers that use it hasn’t budged from 3% in years.
The problem with privacy is that it's too late by the time harm occurs, but prior to that, there are too many other immediate issues on people plate to care.
It would be great if the electric effects of spinning fast could result in a reduction in inertial mass to counteract the tendency to disintegrate
Java was just unlucky, it standardised it's strings at the wrong time (when Unicode was 16-bit code points):
Java was announced in May 1995, and the following comment from the Unicode history wiki page makes it clear what happened: "In 1996, a surrogate character mechanism was implemented in Unicode 2.0, so that Unicode was no longer restricted to 16 bits. ..."
> If you are creating life critical medical devices you should not be using linux.

Hmm, what do you mean?

Like, no you should not adopt some buggy or untested distro, instead choose each component carefully and disable all un-needed updates...

But that beats working on an unstable, randomly and capriciously deprecated and broken OS (windows/mac over the years), that you can perform zero practical review, casual or otherwise, legal or otherwise, and that insists upon updating and further breaking itself at regular intervals...

Unless you mean to talk maybe about some microkernel with a very simple graphical UI, which, sure yes, much less complexity...
The title should of been 2004 - we have too many photos in 2024.
I'm starting to think this Matt guy might not be the right person for leading the Wordpress community.
You might just load someone else's data, and the index is desirable in general for speeding up analytic queries. It's possible to work around that, of course. But depending on what you do, it can make writing efficient queries against the data more difficult. That's just a distraction because most of the time, those long columns won't matter anyway.
Peter was extremely helpful in my successful O1A petition, highly recommend working with him.
There was $1.6 billion allocated for fighting 'disinformation'

So expect more quality articles like this.

Did you also notice the subtle "Russian doll" anchor in the article?
Some subreddit got purged over the years, some for the best, some for the worse, I couldn't find where in the new UI you could find moderator names.

Aaron is probably turning once again in his grave...
A typo of "MENA"
At least they found my toothpaste last time. ;-)
> GOAT traded at a market capitalization of just over $1.8 million

Would you use such grand words to describe drunks at a roulette table?
What are some of the go-to books/articles for computer chess? I like the game and have a decent understanding of basics, so studying algorithms based on the game would be a good opportunity for me to learn conventional algos, but also RL/ML/MCTS etc. Also I wonder what is the go-to codebase these days?
This is nonsense. Just because some small parts of the code are must be annotated as unsafe doesn’t mean that we’re suddenly back to C land. in comparison, with C the entire codebase is basically wrapped in a big unsafe. That difference is important, because in Rust you can focus your auditing and formal verification efforts on just those small unsafe blocks, whereas with C everything requires that same attention.

Furthermore, Rust doesn’t turn off all checks in unsafe, only certain ones.

,
Because when the maintainers have stopped patching that version against all known security vulnerabilities, that doesn't stop the bad guys from looking for more vulnerabilities. When they find one, it will get exploited. So you either wake up to an email from Have I Been Pwned to say all your customer data has been exfiltrated [0], or (if you're lucky) you have a mad scramble to do that update before they get you.

[0] Probably including those passwords you didn't hash, and those credit card numbers you shouldn't be storing in the first place because, what the heck, it meets your needs.
I'm literally giving a talk next week who's first slide is essentially "Why IEEE 754 is not a sufficient description of floating-point semantics" and I'm sitting here trying to figure out what needs to be thrown out of the talk to make it fit the time slot.

One of the most surprising things about floating-point is that very little is actually IEEE 754; most things are merely IEEE 754-ish, and there's a long tail of fiddly things that are different that make it only -ish.
Table tests can enable useful test naming without a bunch of clunky named test functions. I use them most often in Go but I’m sure other languages have support

https://go.dev/wiki/TableDrivenTests
Beta cells are destroyed only during type 1 diabetes and are not associated with dietary choices.

During type 2, your body becomes resistant to the effects of insulin produced by the beta cells and they go into over drive providing insulin. Eventually, the beta cells become over stimulated and reduce effectiveness, but they don't die.

There's no reversing type 1. You can have remission of type 2 and your beta cells return to normal. Neither outcome depend on "how many are left
> Are the [features] described with high-dimensional spaces really all 90° geometrically orthogonal?

If the features are not statistically independent, I don't think it's likely that they're truly orthogonal; which might not affect the utility of a distance metric that assumes that they are all orthogonal.
It would be interesting to try the opposed but similar strategy of finishing absolutely everything but half-arsing the stuff I don't care about.

Might give more psychological closure, prevent me giving up, and could yield good results if there are a lot of cases where I was overthinking it.
In the UK, a continuous monitor costs around £100 a month and isn't available on prescription for type 2 patients. This can be a major problem for many people who may already be suffering a drop in income due to ill health.

I agree they can be a game changer for managing the condition though and, for me, it's money well spent.
Need to look into how this turned out – I've sent letters to Merkley and Wyden over the years about privacy concerns relating to facial recognition and similarly invasive technologies. We need more regulation in this space.

That said, the TSA is in some respects the lesser concern. Don't get me wrong, the TSA not having free rein with facial and biometric technologies is a good thing. But when companies like Clearview AI (https://www.clearview.ai) sell their facial recognition technologies to local police departments – technologies that were built on illegally obtained data and have a history of substantial racial bias – we have bigger issues. It's opaque, unregulated, invites a wellspring of social injustice, and doesn't past muster under any ELSI framework.

Government regulating government is important. But we, as a society, need to stop giving private companies like Clearview AI a pass on harmful, exploitative behavior – especially when they're run by founders like Hoan Ton-That who offer post-hoc rationalizations that amount to (and I'm paraphrasing here) 'Well, if we hadn't done it, someone else would have, so why not us?'

We need a bigger bill that enshrines and elevates privacy for the modern world.
Cool project! When is the next hike of the property?
Krita is amazing but isn't it specialized for digital painting rather than general purpose image manipulation?
I started with html/template, but got fed up with it because I thought it was so hard to pass data around to different components. I don't know, I just didn't jell with it.
Nobody said it was. The point is that it's better.
Sorry for that, I never saw one before. Maybe I should’ve searched before posting. Interesting that my question has caused this kind of response.
> A URL, for instance

VARBINARY is typically ok for that I'd think? Then you can utilize the full 3072 byte limit for the key, since there's no character set applied.

> even just being able to sort user-submitted strings up to a kilobyte

As a software engineer, I completely agree. But as a DBA, I am obligated to make a "tsk" sound and scowl disapprovingly!
A recent study found that $5 per dose would provide enough profit to pay for R&D and then some
Slightly off topic but I built https://chessladders.com
I need to manually admin my database server maybe once every 2 years or so. Definitely not remembering them 2 years later.
Poor Boeing and their billions and billions in guaranteed government defence spending. They’re fine.
Same deal with Rust.
No doctor is going to lose their job as a result of following established guidelines.
Isn't that basically Templ [0] then? But Templ has that extra build step for preprocessing and converting back to plain Go files.

For me, gomponents is the middle ground. You don't get everything, but quite a lot of JSX-like feel. I was inspired by JSX after all. :) [1] Although I called it GOX back then… :D

[0]: https://templ.guide
[1]: https://www.maragu.dk/blog/gomponents-declarative-view-compo...
This comment I feel sure would repulse Shannon in the deepest way. A (digital, stored) bit, abstractly seeks to encode and make useful through computation the properties of information theory.

Your comment must be sarcasm or satire, surely.
From Google:

> The Corporate Transparency Act (CTA) is a federal law that requires certain entities to report information about their beneficial owners, or individuals who own or control a company.

> The CTA was enacted in 2021 to help prevent and combat money laundering, tax fraud, terrorist financing, and corruption.

I'm not convinced that the downside of some extra paperwork outweighs the value here. I also don't see how this violates any part of the constitution.
The important difference is that sigstore enables a "single click" signing procedure with no faffing around with key material. How it works is much less important than the user experience, which is vastly better.
Devs Required to Share Phone and Address in the EU
I’ve been usually ubuntu LTS for a very long time now and can’t remember the last time I had a bad update experience. Now if you live on the edge with Arch your chances go way up, especially if you wait too long between updates.
Dang, will fix when I get home! Thanks Nick, and hi!
You completed your most successful project just by talking to other people -- your recommendation to go it alone seems to contradict that. Does it come from having had a bad experience?
Was it really a vicious attack? He wanted to come here and tell me about his law firm and what he does and asks me what I think about it, so I gave him exactly what he asked for.

And I'm not an immigrant, I was born in the US and have lived here my entire life and H-1B has no effect on me personally at all. But I do work for a living and I have enough common sense to understand that one group of workers being exploited is the same as all workers being exploited.

The problem is not nation states or borders - people were being enslaved and exploited and abused by powerful autocrats long before there were ever any nations or borders, it's just human nature. The purpose of "the system" is to protect human society from its own destructive self-serving irrational urges, and this system is not some outside force that we can point the finger at, we are the system and everything we say and do and think and believe determines what kind of system it is.

I could argue that I am attacking the system, by not biting my tongue when confronted by the landed gentry, rather than playing along with my culture's indoctrinated tendency to roll out the red carpet and start kissing ass whenever a successful millionaire enters the room.
gomponents is just a glorified string builder, so it's more or less like writing HTML in Go that gets output from the server. So you put event handlers on your elements like you normally would, write scripts and include JS like you normally would, etc.

That said, there's gomponents-htmx [0] for easy integration with HTMX.

[0]: https://github.com/maragudk/gomponents-htmx
I hope those screenshots are not from the final version, otherwise there will be some choice reviews about the snowy landscape with perfectly cut angles - which was excusable on N64 and even on PS2, but there were some advancements in the past 2.5 decades in the field of graphics computing...
I didn’t mean it as a complaint (that’d be meaningless, it doesn’t hurt me in any way) but merely as an interesting pattern I noticed. I’m happy that it generated interest, even though I got very little to no upvotes at the end!
Article makes zero sense. The fact that these goods are routed to Mexico is in passive voice. Who exports it from US?

Why would they route through US which has a higher standard of screening rather than shipping it directly to Mexico?

What's is the import export certificate label on these boxes? US importers are registered with bonds.

Who picks up these boxes in the US?

What's with master carton? You can't really create cartons randomly. They all have to belong to same shipper.

What's the import code on these package? It's impossible to lie and smuggle stuff like these. You can say these are medical products then who is listed as American importer?
Yep, this exactly. And the starter kit mentioned is here, for anyone curious: https://github.com/maragudk/gomponents-starter-kit
> there's a long tail of fiddly things that are different that make it only -ish.

Perhaps a way to fill some time would be gradually revealing parts of a convoluted Venn diagram or mind-map of the fiddling things. (That is, assuming there's any sane categorization.)
What's Storybook? Could you elaborate?
It seems to me that what is needed is a "provisional" server that grants you access to the "good" server.

So an GUID accumulates reputation after some amount of play in the provisional server. If you get enough reputation by not cheating, the GUID gets whitelisted for the "good" server. You can have multiple tiers, so the really good/fun people get to the third of fourth tier of demonstrated non-cheating.

If they cheat, get banned, they need to climb the tiers with GUIDs again. The cheaters will want to cheat, they won't want to pay the dues. The legit players will happily try to get to the second and third tiers, so you could probably just require 1 hour of not-cheating for the first tier of server, and then maybe 8 hours to get to the third tier.

You could shadowban/honeypot after the first tier, so you shut all cheaters that you detect to their own cheater server where the cheaters can all get shunted to.
I hadn't seen that one yet, I'll check it out. :-)
Main pro: You are an American.
Didn’t we already know that? Chloroplasts are a whole different organism that was subsumed by photosynthetic organism cells much later, much like mitochondria. Moreover, isn’t the dominant hypothesis that life originated in the primordial soup, basically underwater?
A bit of a stretch to compare them to each other.