skysight-inc/HackerNews huggingface dataset:
The other thing I do is disable history. I forget the flag in Firefox (might be places.history.enabled or something). Forward and backward navigation still work per tab, but nothing gets recorded in the history menu. Every once in a while I wished I could go back into my history, but overall I prefer not to leave a log of what pages I've been to.
That's about host keys, not user keys. And... I'm struggling to think of a threat model where that problem manifests in a compromise? Like, what's your threat model?

That said, CAs actually really help with that problem, because if a server has its host keys signed with a CA and then the user trusts that CA then they don't have to TOFU the host keys.
Again, to be fair, she proposed (though now rescinded I believe) price controls on food.
It’s hard to say what long-term effects this could have on kids today, but the brain-rot aspect is real.
After the Deluge: Appalachia's "Climate Haven" Myth Unravels
Need to try this.
That is comically cheap.
The Russian invasion of Ukraine taught me a big lesson: once tensions are whipped up enough, the average human loses their mind. Going on Reddit, it was almost unreal for me, watching everyday Westerners wish death & destruction on everyday Russians - for the actions of the Russian Government. Yes, Russia was wrong to invade Ukraine.

But hundreds of thousands (millions?) of Russians have protested and opposed their leadership. That doesn't matter once nationalism is in the picture.

Which reminds me of the Americans who casually say the US should bomb the Three Gorges Dam & kill hundreds of millions of Chinese in the event of a war. Nationalism turns the average respectable human into something else.
I could definitely do that but my mom's customers are usually older and already struggling with technology and I feel like this is one step too far.
> Moving fast is often crucial, but you typically also get more readable code, which is also worth it.

I think the exact opposite is true, actually—because of the introduction of stuff like lifecycle hooks it becomes very difficult to figure out how the domain semantics translate to query/execution semantics. Of course some are lighter than that and just e.g. map a table to a domain type (which is much more readable), but that's not typically what catches criticism.
LineageOS is fine for me, just I wish I could restrict connections to some ip ranges somehow, like allowing only 10.x.x.x in/out connections from given app on os level
Building a better and scalable system for data migrations
I'm using "archive" as a generic term for gzip/zip/etc.

But that's a good point; I'd not considered that if you compress the HTTP response it'll almost certainly get automatically extracted which "detonates" the (g)zip bomb.
They were trying out living in Japan. "I needed more time to judge whether I should take the leap to move there or not."
That's every billion dollar publisher that releases games with initial purchase + microtransactions beyond cosmetics. So Activision/Blizzard, EA, Take Two, and Ubisoft. Like it's one thing to do free-to-play + pay-to-win but it's quite another to charge $60 and then make the game worse solely to drive people to buy things that will make it suck less. And they all do it.
Future research. If you're interested in funding a bunch of grad students to sit at a table holding beers, I'm sure they'd be happy to talk.
> I think one of you has one in mind and the other the other.

This is very possible.
Ask HN: How do you search for low level content nowadays?
Recently I've been messing around x86-64 assembly for fun. I can't help but notice that searching for relevant information online is much harder now that it was 10 years ago when I started with programming. It could be related to my particular topic, or I'm just getting old, but bare with me.

Yes, SEO is a major reason for it; ad-infested and LLM-generated pages rank very high in search results. But even if I work around those (with Kagi, for example), it's harder still: Searching things like x86-64, POSIX, ABI's, etc, rarely yields results for me. Authoritative content is thin and spread out across disparate man-pages. Some things are left out completely undocumented. LLM's seems especially helpless dealing with low level topics.

A large portion of this field feels like folklore knowledge, and I didn't even get outside x86-64 on Linux; I can imagine it's much less approachable in the embedded world.

Can you relate? How do you deal with it?
> what difference does it make if I happen to sit in another country?

Because you're breaking the law in that country and your country is actually trying to be help you not do that.
Sounds anti-competitive to have special install options for your own apps right in the settings menu of the device...

/s
Your experience highlights the dual nature of internet access.
It's interesting to note that Linux Foundation is not even mentioned anywhere in the discussions. It is all Linus Torvalds for people apparently. Linux Foundation and their corporate lawyers should be the ones who recommended this right?

Moreover, I am interested if this effects FreeBSD which is not run by corporates like Linux Foundation but is still US. And what about OpenBSD which is Canadian?
The PS5's browser is hidden (it'll pop up when clicking links in Youtube video descriptions, etc), but it seems that the XBox one is just there to be used.

So, yes.
pg_duckdb beta release: Even faster analytics in Postgres
Note that body fat percentage is notoriously difficult to accurately measure. The linked calculator uses the navy circumference method which gives readings ±3-4 points for most people and even further off for some. It gives me 3.5% which would be insanely low (I'm probably somewhere around 8-10 right now) because I have an unusually wide neck. To get more accurate readings you'd have to pay for a DEXA scan or a bodpod but even those can be off by a couple points.
Two rules of success:

1. Be attractive

2. Don't be unattractive

Lack of multi cursor supprot is unattractive in current era.
The term is "dynamic scope": https://en.wikipedia.org/wiki/Scope_(computer_science)#Lexic...

It isn't a very common language feature, but you could take a look at React's `Context` or Common Lisp's `defparameter`.
Risers and Fallers What happened to the intellectual giants of the 20th century?
And that's on the cheaper end of California!
Wow, has it already been ten years? I also wrote a clone of 2048 back then (https://github.com/nieware/gofusion), using Go and a QML-based UI, for a contest, and (to my astonishment) actually won the first prize, which consisted of a Nexus 7 tablet (which served me well for several years) and a rare original vinyl Gopher figurine (which is still sitting on my desk looking at me serenely with its googly eyes while I type this).
So that guy violated the buffer zone rules, despite likely knowing exactly what he was doing was in violation of the rules, and was charged accordingly.
Why Are Americans So Rich?
Passival my arse. You need your head looking at if you think that's an unusual grammatical construction! :)

I'd say the thing you're commenting on is normal, if not altogether correct, in British English (Where are you from? I'm from the UK).

https://dictionary.cambridge.org/dictionary/english/need-hea...
Just downloaded the new classic version with ads and wanted to pass along a suggestion that Thor makes.

While I understand that you’ve gotta make a living, ads are far more palatable if the user can consent to them.

And the way to make the user a part of the process is to offer a trade for the ad, rather than obtrusively running them.

“Would you like 500 gold to watch an ad?”

Yes? Ad for in-game currency that provides powerups? That’s a great deal and it’s win/win.

No? Okay, no ad, but no power up.

Statistically, you almost always get a yes, but the players are 100x happier than the slimey games that force ads in unscrupulous ways.
I looked it up, and there are 6.6e21 9x9 sudokus, which I wouldn't consider constant time practically
Same thing that happens when someone sends you a message on any messaging platform when you don't have the app to view the message. It just sits unviewed by you.
Building systems that detach users from legal identities may lead to more constructive outcomes yet it sounds like utopia
Notes from the Progress Studies Conference
> hijacked the thread

I (try and) mostly only respond to subthreads that mention Rethink.

> why do you keep comparing one on device firewall like Netguard with a cloud first solution like RethinkDNS

Rethink isn't cloud-first.

> where you or other RethinkDNS devs

There's 2 of us. The other one isn't on HN, or reddit, or any other forum.

> spammy marketing tactics of spamming makes your product looks like a scum

I'm sorry you think that.
I'm very happy with my 13" Framework, which uses a 3/2 aspect ratio 2.8K screen. It hits a sweet spot of large enough and light enough. For coding I find that a tiling window manager like Sway helps me maximize the use of my screen, so I've never really felt the need for an external monitor.
AMD Ryzen 7 9800X3D official performance leak: 8% better at gaming
The only thing that makes me nervous about passkeys is the idea that I'd be forced to use them. I find them very inconvenient and a hassle. However, I also see how they are an improvement for most people and I applaud having that option.

> Creating a passkey will not necessarily do away with your password for good.

This is good. My fear, though, is that there will come a day when using passwords will no longer be an option.
Make sure you have an ad blocker before clicking that link.
You don’t need to restrict functions.

You can still organize functions into groups via libraries or modules. But ultimately that’s just aesthetics.

ModulaA.funcA
ModuleB.funcB

FuncA cannot be called from ModuleB. This restriction is possible in terms of organizing code but you can see it’s just naming and ultimately has no effect outside of aesthetic appeal.
Why that one coworker got fired for no reason
You're misunderstanding: the fact that the new error is different from the original one doesn't change the fact that the function returns an error. Exactly like how async functions awaiting on a promise to create new promises doesn't change the fact that the function is an async one.

Sure sometimes you can avoid propagating the error upward, but that's not the most common case and it also happens with async/await (if you don't need the result of the promise in the caller function you don't need to await and to make it a async function).

In Rust the similarity is very flagrant because there are one postfix operators for both (? and .await).
No no, I think you misunderstood my critic. Defer working on block-scope is fine; however, if I exit the block through a return (or break), the deferred function is not called.

To my knowledge, you need a compiler extension to implement this in C (or use a C++ destructor).
That's regional pricing.
PS4 has the browser, so yes.
> their gangster gov't is, and this is what happens.

But sadly, short of WW3, only the people can replace them. And that would invoke memories of 1917.
Yep, dopamine plays a crucial role in how we cope with challenges, especially during adolescence
Well, this comment (https://news.ycombinator.com/item?id=41932923) seems to indicate that Russian military industrial companies seem to get some use out of contributing to the kernel. As to your question, I cannot answer it to any degree of accuracy and I believe you cannot either.
Thanks for sharing this. It at least informs us of a nuanced definition of rates, but as other readers here have mentioned it does appear that actual byte-to-byte download and upload rates are both advertised and overdelivered by some ISPs.

Good to watch out for, though!
> There are zero EU companies designated as gatekeepers by the DMA.

Not true. Booking.com is also designated as a gatekeeper and is based in the Netherlands. Yeah, they're the only one, but there are only seven designated gatekeepers total.
I’d do that if that benefitted me. What do I get if I deliver the project earlier? The 2 weeks that I delivered it earlier because I already had root in my machine vs waiting for IT, do I get to take those as vacation, or I’ll just be assigned a new project?

If you are investing in increasing your output, only do so if you are going to reap some benefits too.
> gzip bomb (100kB size, unpacked around 20GB)

Not possible (unless you're talking double gzip). gzip's max compression ratio is 1032:1[1]. So 100kB can expand to at most ~103MB with single gzip.

Brotli allows much larger compression. Here's[2] a brotli bomb I created that's 81MB compressed and 100TB uncompressed. That's a 1.2M:1 compression ratio.

[1] https://stackoverflow.com/a/16794960

[2] https://github.com/google/google-ctf/blob/main/2019/finals/m...
This is interesting feedback. I always thought that ads being unobtrusive and not part of gameplay would be the saner choice. In my mind, when games ask you to trade watching an add for some kind of in-game benefit or currency, that feels like an unreasonable demand. The ads impinge on the gameplay. The way I've set up the site, ads are tucked in their own corner and should never affect gameplay (though there have been instances of ads spilling over the powerup bar, I'm working on that). Thanks for sharing!
The difference in the comment section between the source and here is quite impressive.

I can't understand why people feel the need to throw so much hate in reaction to this kind of announcement.

There isn't even the beginning of a reflection, just pure hate.

It's sad, really.
This article is discussing the paper at: https://www.nature.com/articles/s41586-024-08080-x

and this post is (likely) a duplicate of https://news.ycombinator.com/item?id=41927684
For the record, there are plugins (for e.g. Emacs) that provide visual feedback on regex operations.
Personally, I think I would rather face N Persian chariots, than 2N Mongols on horseback. I wonder if anyone has done a comparative test?
I personally do what I can. I've been trying to find old phone books and catalogs at garage sales, scanning them when I can get them. I teach my children that this is a responsibility of theirs.

But if you're offering me even a fraction of Google's budget, I think I might manage to scale things up.
1. I rely more and more on official documentation alone, and the code itself, especially since SO went down the toilet.

2. Sometimes Copilot is actually useful. E.g. Zephyr frameworks[0] documentation is quite a hit and miss, and it's code is... well... it's a lot, made by a million people and it shows. When asking for example code for some arcane option, I found it frequently useful (something which I hate to admit).

[0] - okay, maybe Zephyr is not on the same low level as ASM, but you get the idea
Totally agree. I prefer Threes! myself but ultimately, the market determines what's fun. Grabriele has been so humble about his success and while I feel for the Threes! developers, they came across as exceptionally sore.
Zig was[0] going to make functions "colorblind" by not needing the function to be declared differently. Just a configuration in your root file[1]

[0] I say was because I don't know the current status of async in zig or if it will come back in the future.
[1] https://kristoff.it/blog/zig-colorblind-async-await/
That’s probably true, but I’m not sure if it’s the same with other paradigms.

I had Pascal, Assembly and Haskell and it was quite practical and focused on universal concepts that apply to other paradigms and to software in general, it’s just OOP that has focus on concepts that are considered superfluous or damaging.

I personally blame fashion. Patterns and inheritance became fashionable and people just assumed they are as foundational as things like “variables” or “functions” or “ifs”.
There are two coins or die being flipped here. I am guessing they likely use the von Neumann trick for getting random data from biased sources

https://en.wikipedia.org/wiki/Fair_coin#Fair_results_from_a_...
I'm disappointed in HN for stomping this person for the game that they made. They had no idea Threes existed, made this game as an experiment, and it went viral. Despite this, they still acknowledge Threes on their site.

But they post here and are dogpiled on by people saying they ripped off another game and should feel like a scumbag. That's wrong, let's be kind to each other instead of exhibiting rude behavior that discourages people from pursuing their projects because "it's a ripoff of xyz". This started as an experiment, and is now this person's full time career. Can we instead encourage others to follow?

We're not talking about a 1:1 ripoff, we're talking about a game whose gameplay is adjacent to another game. Is Call of Duty a rip-off of Medal of Honor because they're both WWII FPS games?
Who would want to buy the results of a highly unscientific poll about body fat percentages?
Hi gab, thanks for sharing. This was fun to play back during our Facepunch era, and it’s still entertaining now.
Beat you to it. ;0)
This is getting ridiculous, if you believe that social media is an unequivocal bad then ban it for everyone. Adults have no more defenses against its evils than children. It doesn't become less harmful the moment you turn 16/18/21. Laws voted on by group A that only affect group B should be under high scrutiny because there's no natural feedback mechanism— "it seems like a good idea but I wouldn't to live under it."
Note #8: "Who drinks beer below 10 °C anyway?"
That’s interesting—IIRC it is one of the main “pop history” theories. Of course what that means, I have no idea, we (non-academics) usually misunderstand history.
Question. Not specifically for you, but related to this comment.

Would this mean that a PostgreSQL listening on localhost and always asking for user and password is considered Zero Trust, but peer authentication is not?

This part is always a bit confusing for me because there's already been authentication (OS login) creating a session for a specific user (OS user) accessing a specific service (through a unix domain socket) with the specific connection being validated (the unix domain socket permissions).

And from my limited knowledge, the OS login looks like an IdP (Identity Provider), the OS session looks like a JWT already validated by a middleware (the OS vs some API Gateway), connecting to a service using this "token" (OS session vs JWT), and only allowing access to this specific connection (the connection to the socket) if the token is valid (OS session has permissions vs JWT has good signature) and has permissions to the application itself (PostgreSQL checking the connecting user has access to this resource vs the application checking the connecting user has access to this resource).

So I can see this as Zero Trust because the pattern is kinda matching ("the letter"), but also as Not Zero Trust because I feel like this would still be considered a "trusted context" by what the term tries to convey ("the spirit").
The point is that if our properties are defined using survey markers (like my deed, which literally spells out in English where the plot starts, how many feet this way and that) this will stand up to ground shifting. It will be the mapmakers' problem to redraw the maps though.
with US passport I can stay in Japan for 90 days without a visa, if I want to work occasionally remotely for jobs at US part time, do I still need go through all the paperwork to get a Nomad visa? what's the purpose of Nomad visa when everyone has a laptop and can work remotely if they want to?
Backticks were fairly important for shell scripting in the past, but have officially been replaced with $(), which can be nested.

My intuition is that Perl would be the most challenging on a keyboard where it's harder to type unusual punctuation, since it feels like a very punctuation-heavy language, but I don't know whether it actually uses more than C (I think the backtick has a shell-style meaning in Perl too).
Those darned Belgian maintainers!
There is another slot below that reads "archival grade printer".
JavaScript or WebAssembly: Which Is More Energy Efficient and Faster? (2023)
Not in C or C++, at least, the bit and byte order is not defined.
Odin can be considered even more "half-baked". It is not a mainstream "corporate approved" language either. It's one thing to suggest sticking with Go or using C# as an alternative, it is another thing to suggest languages like Odin, Zig, or some other almost unknown like C3. At least V has a place at the table, with being an actual useful alternative to Go. Has a significant following and hardcore fans, because V gives them the missing features that many Go users have been begging or looking for (enums, sum types, immutability, easier C interop...). Same can kind of be said for Zig, with having a significant following, and pushing it as an alternative compiler for C.

Anyone taking a serious look at Odin or C3 (strangely morphed from C2 into being more Jai-like or Odin-like), will know they are both no where near to being production ready or 1.0 (many years far away), despite both being old. Odin has less of a following, less contributors, minimal documentation, no books on Amazon, and many of its good ideals were admittedly "borrowed" straight from Jai. Many consider Odin a Jai-clone, where it would be better to wait on the "real McCoy", which would be Jon Blow's releasing of Jai to the general public. Jai fans[1] are about as hardcore as it gets. When Jai is finally released, nearly everybody will forget about Odin or C3 (even tsoding suggested dropping it for a public release of Jai), and very few people even know about them as it is. Just about whatever Odin (or C3) wanted or aims to do, Jai does.

[1]: https://jamesoswald.dev/posts/jai-1/ (Simplicity, Jai, and Joy)
> However I think there needs to be more "safety" around them. It's very easy to accidentally have multiple cursors active without you knowing ...

Relatedly, if you've created cursors across many lines (or more lines than fit in your viewport), and for whatever reason you want to move all the cursors to the start or end of lines, you want to press Home/End not once, but twice, due to to possible word wrapping on lines outside your view. I've lost nontrivial work by making this mistake!
It’s really odd to me, too, seeing as that Apple products don’t scream overt conservatism, but clearly their product practices do.
the GPL
Are particular questions?

So far my experience with joining and working at Cloudflare has been fantastic. Coming from a background of startups and academia, the size and scope of what Cloudflare is building and currently runs is overwhelming.

In academia I've seen lots of excellent academic computer science papers that never benefit anyone because they never get turned into a tool that someone can just pick up and use. Ideas have inherent value, even useless ideas, but it feels good to see great ideas have impact. What appealed to me the most about getting acquired by Cloudflare is seeing research applied directly to products and used by people. Cloudflare does an excellent job both inventing innovative ideas and then actually making them real. There used to be a lot of companies that did this 10 years ago, but Cloudflare now seems rare in that respect.
Curiously, while I had a 2.7 in undergrad. I thrived in the workplace. The initial GPA restricted my options for the first 3-5 years, but I eventually became a Principal Engineer at a FAANG. In hindsight, I wish I had balanced my objectives more - but I also lacked the discipline to do things I didn't want to back then.

The follies of youth and all that :)
Continuous Machine Learning – CI/CD for AI