skysight-inc/HackerNews huggingface dataset:
Show HN: Yist – A macOS app for efficient GitHub Gist management
Yist is a new macOS app that simplifies GitHub Gist management. Key features:

1. Sync Gists locally for offline access
2. Create, edit, and save Gists
3. Syntax highlighting for various languages
4. Organize Gists with Collections
5. Quick actions via menu bar and keyboard shortcuts
6. Support for secret Gists
7. Cross-device sync of Collections via CloudKit

As a long-time Gist user, I built Yist to improve my workflow. I'd love feedback from the HN community on how to make it even better for developers.
For the price of an AVP, you can buy an Xreal for yourself, everyone in your row, the pilot, and flight attendant.
Neurological Effects of Exposure to Military Occupational Levels of Blast [pdf]
That's not what the article claims at all.

It claims that, in order for tests to serve as documentation, they must follow a set of best practices, one of which is descriptive test names. It says nothing about failing tests when the name of the test doesn't match the actual test case.

Note I'm not saying whether I consider this to be good advice; I'm merely clarifying what the article states.
"could break the guarantees" is a weak guarantee then.
Tjeerd van Andel — one of the original Alvin divers from Scripps — once told a group of us that their excitement at finding giant mussels around these smokers was both scientific and culinary. Large, rich and meaty, with a hint of Radon, apparently, which meant they had to limit their intake.

It’s a shame there weren’t any deep sea potatoes to complete the classic mosselen-friet / moules frites / mussel French fries combo.
Quick note that the article is talking about why folks are on versions of PG that are not ancient (14, 15).
Well said. If I'm reading about fishing, for instance, an ad for a new piece of fishing gear would not be too annoying, as long as it isn't too intrusive (like popping up in the middle of my reading).

But when I'm watching a YouTube video, having the video cut mid-sentence to some hyper-annoying and unrelated noisy ad simply angers me and makes me look for an ad-blocker.
I think GP's point is that LINE or KakaoTalk or whatever aren't the only ones that are failing to reach global audience, but FAANG is too and "people are stupid they don't understand" or something.

I kind of agree with him, there definitely are region-dependent lunch combo of dominant players rather than there's the single universal set. You seem to have an impression that FB Messenger is globally dominant, and frankly a lot of people do feel that way, my hunch is that's where disagreement is.
I love Inkscape so much. I use it every other week to make presentations, slides or just simple graphics when I need it. I illustrated my thesis with it.

Another piece of 2D vector software that I use and recommend is Graphite [1]. It too is open source. Graphite has nodes and can be procedural in nature. Have them both in your graphics toolbox.

[1] https://github.com/GraphiteEditor/Graphite
I don't think Sigstore is a good example. I just spent half an hour trying to understand it, and I am still left with basic questions like "Does it require me to authenticate with Github & friends, or can I use my own OIDC backend?": it seems like you can, but there are cases where you need to use a blessed OIDC provider, but you can override that while self-hosting, and there are config options for the end user to specify any IODC provider? But the entire trust model also relies on the OIDC backend being trustworthy?

The quickstart guide looks easy enough to follow, but it seems nobody bothered to document what exactly is happening in the background, and why. There's literally a dozen moving pieces and obscure protocols involved. As an end user, Sigstore looks like a Rube Goldberg trust machine to me. It might just as well be a black box.

PGP is easy to understand. LetsEncrypt is easy to understand. I'm not an expert on either, but I am reasonably certain I can explain them properly to the average highschooler. But Sigstore? Not a chance - and in my opinion that alone makes it unsuitable for its intended use.
Why did you need to index fairly long strings in their entirety in a way that preserves collation behaviors?

And why is a 768 character limit woefully bad, but a 2704 character limit is totally fine?
A week of fasting is a 7 days of consuming nothing but water, salts and possibly some vitamins.

You don’t have to try for 7 days on the first attempt, though for most people the first two days are the most difficult so riding it out past the third actually gets easier.
They use every tool you can imagine. Most are not imaginative but many are profoundly smart. They could do anything they set their minds to and for some reason this is what they do.
https://en.wikipedia.org/wiki/Dimensional_analysis
Don't worry, 20 years from now Go will also be struggling to change assumptions baked into the language in 2012.
I think by the point you are ready to hire a big foreign consultancy you’ve generally tried in-house and failed.

Of course you can try with a local consultancy, but I wouldn’t know of any, and I assume the reason for choosing one over the other is mostly a matter of reputation.
EU court upholds right to sell Playstation add-ons, in loss for Sony
Capybaras don't have shit on hyraxes. I'm trying to be an early adopter, but like all hot new products that seem to be out of stock everywhere.

https://en.m.wikipedia.org/wiki/Hyrax
I used to work for a company that was in the fintech space and had several scenarios and rules for deciding whether a person could apply for a loan, the interest rate, prime, insurance etc. A lot of the code written was way back from the early 2000s in Visual Basic and migrated improved towards C#.

I didn't knew a thing about how the business operated and the rationale behind the loans and the transactions. The parts of the application that had unit and behavior tests were easy to work on. Everyone dreaded touching the old pieces that didn't have tests.
That's fine, if people go over the bandwidth cap of 10G with their 10G/sec connection, they will be reduced to 2G speed for network congestion protection purposes. Also for and extra $20 you can buy another 10G of bandwidth!
> It's good that PyPI signs whatever is uploaded to PyPI using PyPI's key now.

You might have misunderstood -- PyPI doesn't sign anything with PEP 740. It accepts attestations during upload, which are equivalent to bare PGP signatures. The big difference between the old PGP signature support and PEP 740 is that PyPI actually verifies the attestations on uploads, meaning that everything that gets stored and re-served by PyPI goes through a "can this actually be verified" sanity check first.

I'll try to answer the others piecewise:

1. Yes. You can use twine's `--attestations` flag to upload any attestations associated with distributions. To actually generate those attestations you'll need to use GitHub Actions or another OIDC provider currently supported as a Trusted Publisher on PyPI; the shortcut for doing that is to enable `attestations: true` while uploading with `gh-action-pypi-publish`. That's the happy path that we expect most users to take.

2. Not yet; the challenge there is primarily technical (`pip` can only vendor pure Python things, and most of PyCA cryptography has native dependencies). We're working on different workarounds for this; once they're ready `pip` will know which identity - not key - to trust based on each project's Trusted Publisher configuration.

3. Not yet, but this is needed to make downstream verification in a TOFU setting tractable. The current plan is to use the PEP 751 lockfile format for this, once it's finished.

4. That would be up to each of those tools to implement. They can follow PEP 740 to do it if they'd like.

I don't really know how to respond to the rest of the comment, sorry -- I find it a little hard to parse the connections you're drawing between PGP, DIDs, etc. The bottom line for PEP 740 is that we've intentionally constrained the initial valid signing identities to ones that can be substantiated via Trusted Publishing, since those can also be turned into verifiable Sigstore identities.
> What do test names have to do with quality?

The quality of the tests.

If we go by the article, specifically their readability and quality as documentation.

It says nothing about the quality of the resulting software (though, presumably, this will also be indirectly affected).
Twitter is a really straightforward and proven business model. Gather user data and sell ads. That business model fuels some of the biggest tech companies in the world like Meta. It's a business that can be run with incredibly high margins because it's just web hosted software.

The Boring Company has no active project outside of a curiosity of a "transportation" system that only runs during conventions in Las Vegas.

Their landing page talks about mass transit as if it's not a solved problem - suggesting that the only possible solutions are flying cars or cars in tunnels. The Las Vegas loop already has its own traffic congestion in it, there are actual videos of people getting stuck in traffic down there. And the Tesla cars can't even drive autonomously even though the tunnels are a closed track with no other traffic.

Meanwhile, China has 25,000 miles of high speed rail providing mass transportation to the second largest populated country on earth. One New York Subway train can move magnitudes more people than the Boring Company's projects.
How does 5 work in practice? Surely no one is actually checking if their arithmetic overflows, especially from user-supplied or otherwise external values. Is there any use for the normal +?
The difference is every line of C can do something wrong while very few lines of Rust can. It's much easier to scrutinize a small well contained class with tools like formal methods than a sprawling codebase.
I welcome this and look forward to seeing the improvements. At the moment I am running some TSS code compiled down to WASM. The last time I executed DKG and signing Webkit took ~25s, Chrome took about ~39s and Firefox took nearly 4 minutes so there is clearly lots of room for WASM optimization in Firefox!
In the spirit of redefining the kilobyte, we should define byte as having a nice, metric 10 bits. An 8 bit thing is obviously a bibyte. Then power of 2 multiples of them can include kibibibytes, mebibibytes, gibibibytes, and so on for clarity.
> Why do you think this is a process problem?

Because if the employees were using some kind of non-monetary compensation that was allowed to be accepted in an uncontrolled manner that's a process problem. When they swiped their decoder ring or what the fuck ever it should have errored out.

> habitually and willfully lying and stealing

Prove it beyond a reasonable doubt and i'll listen.
The lore I've heard is that hire-for-life system was supposed to create psychological safety as a response to excessive siloing habits exhibited by WWII veterans, after surviving in reverse order of their individual bus factors - e.g. skilled maintenance crews, medics, were more likely to be spared in last-ditch assaults, which happened a lot in the war.

IMO, that after series of economic downturns and corporate restructurings during 80s-00s in turn created excessively risk-averse Japanese corporate culture; now that they can be fired, psychological safety was gone, and now maintaining hire-for-life eligibility was seen as crucial. It may have been implicitly reinterpreted as eliminating others is a must for survival.

That's clearly one of major contributing factors to counter-productive behaviors causing stagnation of traditional Japanese tech companies; outright refusing sales, exports, opportunities, that may affect internal politics and justify job terminations.

It sucks to watch a lot of cutting edge technologies slowly evaporating from such fear of terminations. Hopefully someone figures a way out.
The secret is lots of veggies, fruits, and whole grains. The calorie density is low so it's easy to stay in a normal calorie range or even a deficit which is key for reducing risk of type 2 diabetes. Fat, especially Saturated fat causes insulin resistance. Many studied show this. Please show me any long term studies or a culture that are metabolically healthy on long term keto diets. Take a look at Virta health. Tons of money spent on low carb diets that achieved very little.

Try a book like "fiber fueled". That's a diet that is actually sustainable.
Numerical analysis people do not like it. Having _explicitly controlled_ wider accumulation available is great. Having compilers deciding to do it for you or not in unpredictable ways is anathema.
This helped me a bit: "Procrastinate later! There's always tomorrow!"
Depends on your definition of addressable.

Lots of CISC architectures allow memory accesses in various units even if they call general-purpose-register-sized quantities "word".

Iirc the C standard specifies that all memory can be accessed via char*.
It's still a guarantee. The point of the guarantee isn't that no code can cause certain kinds of problems, but rather that any code that can must be marked unsafe.
To be fair Aester is just a monolithic kernel that philosophically quarantines unsafe code to the lowest level of the kernel.

You still have kernel modules for microkernel-like functionality
Kinda similar to the current AI bubble, don’t you think?
Just to expand on this and clarify one point, as someone who's been keto for over 12 years, the meat part isn't even necessary. Nowadays I pretty much get all my protein from mycelium (Meati cutlets and Quorn grounds), eggs, and whey protein isolate, with plenty of healthy* saturated fats from butter, coconut milk, and heavy cream. Not that I'm a strict vegetarian, but I generally don't buy meat to cook at home anymore and no longer consider it important for a well-formulated keto diet.

I point this out because I've gotten the impression that many seem to view keto and veganism as opposite sides of a "culture war", and use that to justify reacting to one or the other with hostility. In reality, they're entirely orthogonal. One is a range of macros while the other is an ethical philosophy, and they aren't in any way mutually exclusive.

*: To preempt the usual comments on this, my current LDL is 54 and HDL is 57. At its lowest point a few years ago, my total cholesterol was exactly 100. I don't buy that saturated fat is necessarily unhealthy at all.
It depends how many beta cells you have left. Usually by the time you are diagnosed you've lost at least 50%. Once they are gone you'll need exogenous insulin.
Are you saying American voters are tone deaf for prioritizing food availability over ethical sourcing of food?

I mean sure, but I don't think that judgement has any consequence unless anyone grabs a soapbox and starts chastising people for wanting cheaper food. I haven't seen any of the candidates do that yet.
> All participants did at least 30 minutes of moderate physical activity per week.

Is 30 minutes of moderate physical activity per week really "regular exercise"? Seems to me mowing the lawn once a week would qualify.
You'd think they could have asked their AI to come up with a better name than that.
Is it any better calling it an int where it's assumed to be an i32 and 30 of the bits are wasted.
The current proposal says:

> A byte is 8 bits, which is at least large enough to contain the ordinary literal encoding of any element of the basic character set literal character set and the eight-bit code units of the Unicode UTF-8 encoding form and is composed of a contiguous sequence of bits, the number of which is bits in a byte.

But instead of the "and is composed" ending, it feels like you'd change the intro to say that "A byte is 8 contiguous bits, which is".

We can also remove the "at least", since that was there to imply a requirement on the number of bits being large enough for UTF-8.

Personally, I'd make a "A byte is 8 contiguous bits." a standalone sentence. Then explain as follow up that "A byte is large enough to contain...".
> having its own infrastructure

This seems like a different brand of the keyserver network?

> PyPI doesn't need to run or operationalize anything

So it's not a new operational dependency because it's index metadata? That seems more like an implementation detail (aside from the imagined PGP keyserver dependency) that seems accommodatable given either system.

> like the fact that PyPI doesn't need to perform any online operations to validate Sigstore's signatures

I may be missing something subtle (or glaring) but "online operations" would be interactions with some other service or a non-PSF service? Or simply a service not-wholly-pypi? Regardless, the index seems like it must be a "verifier" for design consideration (2) from PEP 740 to hold, which would mean that the index must perform the verification step on the uploaded data--which seems inconsequentially different between an imagined PGP system (other than it would have to access the imagined PyPI keyserver) and sigstore/in-toto.

> ... PyPI would need to be in the business of parsing PGP packets during package upload.

But the sigstore analog is the JSON array of in-toto attestation statement objects.
Fair on the doctor part - I've found doctors to be pretty reluctant to go off label for such things like dosing schedule on these new drugs. YMMV.

Re: the half-life, I generally agree - however at low dosing, a half-life calculator seems to coincide with some folks experience with side effects - especially starting out initially. Once the dosing levels go up, the impact is much less - but even I at my peak weight loss at a mid-dosing level could tell a difference in hunger levels if I had to wait a few days due to travel or whatnot.
They just released another "beta" not long ago. It seems like it's getting closer and closer to being daily driver ready.
I don't think you're giving Rust enough credit here.

For those projects that don't use any unsafe, we can say -- absent compiler bugs or type system unsoundness -- that there will be no memory leaks or data races or undefined behavior. That's useful! Very useful!

For projects that do need unsafe, that unsafe code can be cordoned off into a corner where it can be made as small as possible, and can be audited. The rest of the code base is just as safe as one with no unsafe at all. This is also very useful!

Now, sure, if most projects needed to use unsafe, and/or if most projects had to write a significant amount of unsafe, then sure, I'd agree with you. But that's just not the reality for nearly all projects.

With C, everything is unsafe. Everything can have memory leaks or data races or undefined behavior. Audits for these issues need to examine every single line of code. Compilers and linters and sanitizers can help you here, but they can never be comprehensive or guarantee the absence of problems.

I've been writing C for more than 20 years now. I still write memory leaks. I still write NULL pointer dereferences. I still struggle sometimes to get my data ownership (and/or locking) right when I have to write multithreaded code. When I get to write Rust, I'm so happy that I don't have to worry about those things, or spend time with valgrind or ASAN or clang's scan-build to figure out what I've done wrong. Rust lets me focus more on what I actually care about, the actual code and algorithms and structure of my program.
I believe GM and chess author (and all-round lovely fellow) Matthew Sadler rigged up Leela Zero to effectively play off intuition and do very little or no search for training games. He could usually beat it, but not always. Think it might have been in The Silicon Road to Chess Improvement.
Huh, that’s clever!
My guess is that the Pauli exclusion principle would ultimately come into play, the same thing that keeps stuff from falling through other stuff. Electrons will shove other electrons out of the way, which isn't a lossless process or an instantaneous one. So a perfectly rigid rod would run afoul of special relativity if you pushed on one end.
Touching kids is a no-no over here, across the sea, but security is only patrolling overnight. Not during school hours.

Seems the need for police goes a bit further culturally...
In no way does Hezbollah "occupy" Lebanon. It is drawn entirely from Lebanese society. Truly a bizarre thing to keep repeating so stridently! Its also absurd to deny the literal origins of the group, as a militia that was attempting to defend southern Lebanon from an actual occupation? This isn't hidden, there are shelves of books in english on the origins of Hezbollah? The first sentence of the second paragraph of the wikipedia article on them, just to show what level of consensus there is, states the fact of its origins as a response to an Israeli invasion, and its source for this is....wait for it....the BBC.
Combining is what TFA suggests. They even go as far as closing the article with:

> Note also that I’m not suggesting that unit tests should replace any form of documentation but rather that they should complement and enrich it.
Alum here, most of the international students I knew got a job on campus to get their paperwork done and then you can use it elsewhere.
I apologize, but we don't have access to the real volume data. What we present is based on publicly available information.
love the CSB! they need more funding for added exposure from more entertaining videos.
Or you could use an ordinary electromagnet.
I’ve personally decided to just ignore Android all together for my app. As a solo developer that is all in on the Apple ecosystem, supporting Android just doesn’t appeal to me.

Would it be possible to port your app to WASM and support Android via a browser?
It's significantly easier to flee to where you are a citizen than it is to flee to where you need a passport.

Maybe "easily" wasn't the right phrase but significantly easier, especially in a mental/personal sense.
This person is unhinged.

> It's a desktop on a Linux distro meant to create devices to better/save lives.

If you are creating life critical medical devices you should not be using linux.
I don't think the term word has any consistent meaning. Certainly x86 doesn't use the term word to mean smallest addressable unit of memory. The x86 documentation defines a word as 16 bits, but x86 is byte addressable.

ARM is similar, ARM processors define a word as 32-bits, even on 64-bit ARM processors, but they are also byte addressable.

As best as I can tell, it seems like a word is whatever the size of the arithmetic or general purpose register is at the time that the processor was introduced, and even if later a new processor is introduced with larger registers, for backwards compatibility the size of a word remains the same.
The Lucifer Effect is a great book. It's thesis is "what makes good people do bad things". I recommend it to anyone considering doing bad things, or to anyone who knows good people who do bad things.
I think the line of thought behind the article is making the tests be like a "living spec". Well written tests (especially those using things like QuickCheck, aka "property testing") will cover more than simply a few edge cases. I don't think many developers know how to write good test cases like this, though, so it becomes a perilous proposition.

Do note TFA doesn't suggest replacing all other forms of documentation with just tests.
Small Businesses File Lawsuit Against Beneficial Ownership Requirements
How philosophical do you want to get? Technically, voltage is a continuous signal, but we sample only at clock cycle intervals, and if the sample at some cycle is below a threshold, we call that 0. Above, we call it 1. Our ability to measure whether a signal is above or below a threshold is uncertain, though, so for values where the actual difference is less than our ability to measure, we have to conclude that a bit can actually take three values: 0, 1, and we can't tell but we have no choice but to pick one.

The latter value is clearly less common than 0 and 1, but how much less? I don't know, but we have to conclude that the true size of a bit is probably something more like 1.00000000000000001 bits rather than 1 bit.