skysight-inc/HackerNews huggingface dataset:
> By the time the comparison was html5 vs. XHTML2 instead of HTML 4 vs XHTML1

The relevant comparison is html5 in its HTML serialization vs html5 in its XML serialization. The latter works in every single browser, and has since IE9 shipped in 2011. No one uses it.

> If you know of a single major site (not somebody's little side project) that uses the XHTML mime type

There aren't any, because I suspect people building such sites all discovered the same thing: ensuring well-formedness is _hard_ in practice, and if it's required for the page to be shown at all, then your page will fail to be shown every so often. And no one wants to deal with that.

Back when some people were in fact trying to use XHTML on the web, every so often you'd run into this on some site that sent XHTML based on "Accept" headers. You'd load the site in Mozilla (suite, then Firefox when it came into being) and get an XML parsing error.

There were two common sources of this problem. First, someone editing a template and forgetting to modify closing tags to match opening ones. This can be solved with server-side enforcement of template well-formedness, of course. But it means you can't have your start and end tags in different parts of the template or different templates, which people wanted to do.

Second, insertion of content you don't control, whether it's user-contributed, or coming from some other team (e.g. content-production team on a news site feeding their bits into the CMS templates), or coming via a content provider like the AP or whatnot. You can mitigate this by using a fully DOM-based workflow, serializing before you put on the wire, instead of pasting together strings. But now you have the problem of producing a DOM from whatever non-well-formed garbage you were handed. Yes, you can just reject non-well-formed input, but if you have no leverage over the producer of that input, that just means you can't do your job. OK, so maybe you have a more liberal parser on the input end and then ensure everything internally operates on trees, not text.

But the upshot in the end is that you end up with a lot more effort and the benefits are not entirely obvious (at least not entirely obvious to your management; there are certainly obvious anti-XSS benefits to having good control of what tokens end up in your output and where escaping happens, etc). So the path of least resistance is to just not go there in terms of the XHTML serialization of HTML.

> The fact that the html5 spec does not permit self-closing CDATA elements

I'm not sure why "CDATA element" is important here. You'd want self-closing <style> and <script> but not self-closing anything else? The idea doesn't even make sense for <style>, so presumably you just want self-closing <script>?
Yes, that's a really nice video. Here is the link: https://www.youtube.com/watch?v=u6XAPnuFjJc (Unfortunately, the highest resolution supported is 240p. Anyone has a link to a higher resolution video?)
I didn't say they aren't necessary, rather that the idea was already used in PL/8 during the 70's, a type safe safe systems programming language.

https://courses.physics.illinois.edu/cs426/fa2017/Papers/pl8...

http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.87.4...
Thanks for sharing! Very interesting!
That would have been bad advice for me I think. I loved learning about mathematics and would happily read textbooks rather than doing the stuff that I wasn't supposed to do which is ironically the stuff you are supposed to do as a teenager.

I did go out drinking sometimes and it was fun but living it up depends on your personality and if you are not naturally social its probably not going to be enjoyable pretending to be that guy. Plus at 17 everyone will see through it and not be polite about it.

I don't regret studying hard at 17. I had a passion and enjoyed learning. Was a great part of my life when other things were not so great.
And the Jinri Toutiao app is just an aggregator delivering other sites' news.
I think the one's I'm listening to average to somewhere between 60 and 90 minutes. More agains the 90 min mark.
> An equal amount of money is spent on lost elections too.

That's false. There's a pretty strong correlation between outspending and winning elections. The losing side usually spent less. In aggregate, much more money is spent winning elections than losing them.

eg: https://www.washingtonpost.com/news/the-fix/wp/2014/04/04/th...
So I did some googling and here's their price sheet:

http://toutiao.toproi.cn/kanli/kanli.html

They charge 4-6RMB for the "precision auction" and 0.15-0.3RMB per click, which are only a little lower. These ads are small and only at the tops of certain sections. This suggests a price about half of western prices.

They have "guaranteed delivery" at 160RMB CPM (about $18 CPM).

Oh, and btw: I know more than one person who uses 300+ frequency in Germany, so while yes, tracking helps a marketing manager justify spend in the US, the lack of tracking also helps marketing managers justify spend in Germany.
It seemed pretty fuzzy while moving on a 144hz display.
By 'brand name?' No. I still listen to people talk in pre-recorded episodic content, just not on an iPod, iPad, or iPhone. Sometimes they are videos, sometimes they are just voice. Usually, it is on a Linux device.
It's available via the command line; if your Mac is supported, you can run it as often as you like.

I’ve been running the High Sierra GM since it was released a week ago.

Here's the command:

usage: eficheck: [ --save -b <EFI bin output file> ]
[ --cleanup -b <EFI bin input/output file> ]
[ --generate-hashes [ -b <EFI bin input file> ] [ -p <Output folder path> ] ]
[ --integrity-check [ -h <EFI hash input file> [ -b <EFI bin input file> ] ] ]
[ --show-hashes [ -h <EFI hash input file> ] | [ -b <EFI bin input file> ] ]
I feel like you're getting into No True Scotsman territory here, especially since you're providing examples that have zero relevance to the matter at hand. However, I'll tackle your rebuttals in order:

- I don't think you actually understand the nuances of filing separately vs. jointly. It's a lot more complicated than just different tax brackets and "essentially everything else is the same". For example, filing jointly you cannot take the credit for child and dependent care expenses, you cannot take the earned income credit, you cannot take education credits or deduct student loan interest, etc. There are many more differences as well. It is, in fact, a separate code, not just a separate bracket.

- Individuals under the age of 15 also cannot get a drivers license. Does that mean they are not people?

- Obtaining loans has no bearing at all on legal status. But even so, a corporation can get all kinds of loans. What difference does it make if the loans are for capital or education?

- As you point out, women also are not expected to register for the draft, are they not people?

- The 5th amendment is a very interesting case with respect to corporations. You're kind of getting at the Collective Entity Rule, which basically says that an agent acting on behalf of a corporation cannot always exercise his or her personal rights, such as the 5th amendment. Here's what the courts had to say about the justification for the current state of affairs, "The privilege is limited to its historic function of protecting only the natural individual from compulsory incrimination through his own testimony or personal records" (emphasis mine). Note that it says nothing about "person". Also note that there is quite a bit of activity on this particular point, and in the near future the 5th amendment might be allowed to apply to corporations as well [1].

- Minors cannot be sentenced to prison terms, either. Are they not people?

- More limited does not mean non-existent.

No, I am not confused. In legal status, a corporation is a person. Period. The difference you're missing is that a corporation is an artificial person vs. a natural person (or if you prefer, a statutory person vs. a constitutional person). But still a person.

I'll also point you to the definition of Person from Black's law dictionary. Person. In general usage, a human being (i.e. natural person), though by statute term may include labor organizations, partnerships, associations, corporations, legal representatives, trustees, trustees in bankruptcy, or receivers.

[1] https://www.law360.com/articles/634828/high-court-may-take-o...
If it really mattered at that level, people would have already stopped trying to do Web based OS or applications for mobile phones.

Also Apple, Google and Microsoft would expose the complete set of mobile and watch OS APIs to C and C++ developers, which they don't. They are kept down to the bare minimum for the upper OS layers.
Yes, it's too damn hard, yes. :)
Work you math.
Having worked at Microsoft I see how this usually plays out. Lots of teams and people added for the sake of having people. 9 women can't make a baby in a month. Microsoft has a ton of money in the bank and they need to spend it, make acquisitions and see where it sticks.

Some of the best work at MS I have seen weirdly had been in small teams with razor focus. Typescript, Vscode.
Relicensing React
Not advise but something to bear in mind. The younger you are the more risk you can take with more time to take corrective action.

The main ways to get paid well or get rich and work on your terms is to run a business, trade assets or invest well.

20000 hrs of cranking out JIRA tickets loses its luster. Companies rarely invest in their employees career.

Make of this what you will
I was also a NASA contractor for many years. My employer was the prime contractor but I worked with many subcontractors on my teams as well. Some of them had very stable careers that predated and outlasted mine, since work was available to them whenever they wanted due to their network of personal connections with civil servants. On paper the civil servant was supposed to ask the prime through the contracting officer for a body with a certain skill set and we provided as we see fit, but that’s never how it worked in any reality except on paper. The government employee would always make an informal request, get assurance from the contractor staff about who would be provided, usually someone they had prior experience with or interviewed, and then do the paperwork. When I was interviewed it was by my contractor manager and contractor team, but the civil servant was sitting in the room. I guarantee you he had informal veto authority. As prime you would never risk a customer relationship by doing otherwise — that would be a sure fire way to lose the contract next time around.

In budget planning contractors disappear at the end of a project, which is very useful for budget planning purposes. But in most cases it’s not like those contractors are suddenly without a job, except in rare cases like shuttle workers. Rather the agency has fixed and flat budget, so when one winds down a new project starts up. And it is no surprise that in nearly all cases the skill set allocation of new positions roughly equals those going away. And the same people fill those roles, generally. (Again, the shut down of shuttle and forced retirement of many workers is the exception to this.)

During my time there was a competitive rebid of the contract had. We won, but during the process the competition approached many of us on the contract individually, letting us know what sort of compensation they would be willing to pay for us to jump ship if they won, to return to the same job wearing a different patch on the sleeve. My civil servant “boss” (air quotes because he wasn’t my manager on the org chart, but in day to day reality he effectively was) pulled me aside to let me know that no matter who won I’d still have a job. It was actually the same thing my employer did when they first won the contract from someone else. I wasn’t there at the time, but many of my coworkers were grandfathered in that way.

While what you are saying is correct, it might paint the wrong picture for someone not having our shared experience.
Very interesting. Thank you for sharing this!
It’s function is basically to top Apple off to the fact that there is something weird going on out there in the wild, rather than to offer individualised support/protection.
I think a lot of people value having other people around and in their sight, even freelancers leave their home office and head to coworking spaces and claim productivity gains. Personally I think the office per person idea is overrated, however I've worked in many places where the draw backs of open office hit sometimes. I think the best combo is open office, with hot private offices, and with the extra space, sleep rooms, relax rooms, big working table rooms, even put hipster stuff like a standing desk area in maybe etc.. Oh and if an employees ask for NC headphones just buy them! Also if someone really in the zone on something that distractions could be problematic be okay if Fred say's do you mind if I work from home today on this problem.
Strongholds: Conway's Law in micro-scale
'If we soften up, our readers will go'
Using Simulation to Improve Robotic Grasping
Eight new business mistakes to avoid when starting a company
For ARM, always use Oracle VM. It's around 15x faster for my application.
Craigslist couldn't crack any one of these lists?

MySpace is still 3rd, really?
How to master mobile device management for Apple devices
Closed by stackexchange moderators as not constructive. Go figure
They may know it from Jagermeister and jäger bombs.

We may not know our history, but we do like drinking.
The same way push based systems do it. Prom. scrapes the individual metrics off each instance and provides aggr. functions in the query lang.
Sadiq Khan a notable brexiteer?

I'm calling you a liar!

Two options: You provide reputable sources to back this assertion of yours. In which case I will profusely, unconditionally and publicly apologize.

Otherwise my assertion that you're a liar stands.

Note that no English tabloid product, nor anything Breitbart counts as a reputable source in this context.
I worked as a contractor for a while at a company that was pretty much entirely great developers, but they had one guy who had more experience than nearly everybody else put together (he was in his 50s, and had worked on all sorts of cool things in his career), who was also more productive than anyone else. The founders of the company knew he was their top producer, and so they gave him whatever he wanted (within the bounds of budget, etc.).

What he wanted most was a private office, and he got it, despite no one else in the company having one (it was kind of smallish and closet like, but he had a door that closed, and that made him happy). I always suspected that was a big part of why he was so productive compared to everyone else; though the huge amount of experience and his seeming disinterest in anything but churning out code (all of his hobbies also involved code to some degree, and he was always way out front on various trends in software development) were also big contributors. It's also worth nothing that he didn't put in long hours. When it was crunch time in the office, he wouldn't be one of the people there on the weekend. Paradoxically, I think that's another contributing factor to his high productivity.

So, yeah, I've often wondered whether Google/Microsoft/Facebook/etc. has internal metrics about this. Google is infamously an open plan office, Microsoft has offices, facebook is mixed (I think?). Surely, these companies who keep gigabytes of data about everybody on the planet has some idea about the relative productivity of offices vs. open plans.
It’s pretty easy to design nuclear reactors that are earthquake safe. I would think that an island nation like Taiwan with unreliable international relations would benefit from a locally supplied power source like nuclear.

This is a world of trade offs. It is easy to point to the bad,m in one approach, but you must also evaluate the bad of the alternatives.
YouTube’s technology can now spit out thousands of different targeted video ads
The article doesn't specify, but I assume that "weekly" means "one boot per week", right? The kinds of malware that this type of check is trying to prevent would easily circumvent an OS-level check, no? I assumed this weekly "check" would happen before the OS is loaded.
You would expose a counter with the total request count. Summing those up across all nodes known by Prometheus will give you the total amount of requests currently visible to monitoring. With "rate()" you could calculate the requests/second.

But yes it is possible to miss some requests if a node goes down without Prometheus collecting the latest stats.

But as the parent said, if you need such totals it might be better to store them persistently. Also I do not know a scenario where the total number of requests will trigger an alert.
Grow up. All of you.
Question.. if planet 9 exists.. how far along are the defenses against asteroids shaken loose by it passing through the oort cloud?
This was really pleasant. Thanks for sharing this.
SQS is probably carrying design baggage from when it was introduced in 2004. I've never used it, but would Kinesis be better for what you want to do?
Nice! I have been meaning to look into integrating Chroma with Blackfriday. The plugin API looks really nice.

Note that lexers.Analyse() will almost always fail at the moment, as I've only written support for a couple of languages.
Encapsulation is another one.

Before Java 9, the only way to hide private APIs would be to have everything in the same JAR.

If a library is splinted across multiple JARs, then private APIs only to be used internally by library become exposed to everyone, and there will always exist someone making use of them even if explicitly marked as internal.

This is nothing new to Java, other languages e.g. Ada, Delphi, .NET and even Go have this kind of visibility concept.
parent post sounds like sarcasm to me.
I don't think so, the sites seem to indicate free can also open dot files[0], I do believe there is a limit on the number of elements though.

IIRC I did some graphs for my bachelor thesis (10+ years ago) with graphviz, and then basically just passed them through OmniGraffle to make them beautiful.

[0] https://support.omnigroup.com/doc-assets//OmniGraffle-Mac/Om...
TeX is not a web standard. It's not even compatible with how markup languages work to put information on the web. Specific problems that are not addressed either by MathML or by TeX:

1. Accessibility, especially regarding screen readers. There are so many different ways to parse TeX and generate the "same" equation, that there would be no way for a screen reader to produce something understandable for those users that need one. Presentation MathML is just as bad, but the best way to solve this is to move closer to existing web content, not to rely on pre-HTML tech.

2. Text Styling that browsers rely on is incompatible with TeX. I'm not really big on CSS, but it's a standard that works, which can't be said for MathML or TeX. The solution we currently have is to basically implement a js or server side TeX parser that outputs span + css/svg to position the text into a readable equation. It would be much better to have a solution that is compatible with browsers natively. Especially one that would allow web developers to use a different font than Computer Modern.

3. Searchability. Because of the flexibility of TeX/LaTeX, you can have many different ways to render the same mathematical equation. This is okay if your goal is print/PDF, but it doesn't work as well for search on the web. Especially if that search engine is expecting something human native, rather than a string of curly bracers and backslashes.
The Bad Hair, Incorrect Feathering, and Missing Skin Flaps of Dinosaur Art
It's interesting to precisely consider what "a voter initiative passed by Austin citizens" translates to. And to clarify the fingerprint law was not what was actually passed. That law was passed unilaterally by the city council --- whom a cynic might suggest was driven by what we'll call "lobbying", rather than necessity. The vote was a result of ride sharing services collecting the necessary tens of thousands of signatures that required the City Council to either soften the rules or bring the matter to public vote. The council chose to spend the hundreds of thousands of taxpayer dollars necessary to keep the ordinance intact and hold an impromptu election.

These [1] are the results of that election. Austin has a population of 950,000 residents with a voting age population of about 741,000 [2]. In total about 5% of the resident population voted to maintain the fingerprinting law and 4% to soften it. A 1% margin on a voter turnout of less than 12%.

I fully appreciate that that is a 'democratic republic in action.' I'm certain you can understand one might find it distasteful, just as one can easily understand your distaste for state level 'democratic republic in action.' I'm certain our systems made all the sense in the world hundreds of years ago. But these sort of things do not feel right today when we live in a country with counties that now have greater population than the entire country did when these laws and systems were developed.

[1] - http://traviselectionresults.com/enr/contest/display.do?crit...

[2] - https://www.census.gov/quickfacts/fact/table/austincitytexas...
The existence of the gnomonic projection isn't very surprising, as it's just the perspective projection used by all artists to go from a spherical field of view to a flat plane. That way it's also easy to understand why it can't handle more than half of the sphere.
Babel is dead How to publish native ES modules to npmjs
My favorite managers were always similar to the one you describe. But I also noticed these managers didn't get promoted as the more "pointy haired boss" types.
I was willing to entertain his point of view for a moment.

Then the top post is inviting me to check the node subreddit to look at how much the community upvotes bigotry, and on first glance I see that's clearly bullshit.

Then I check one of this tweets trying to draw simpathy becauase some Random Person On The Internet called him a bigot, I follow the retweet, and the tweet calling him a bigot is a response to a tweet of his introducing racial / gender politics into fucking Javascript testing.

It looks like these days that every most of the time someone is making drama about abuse on Twitter is looks like they have done all the legwork to earn that abuse and are hoping you don't have 30 seconds to take a look at their sources and see their own dirty hands all over the buildup.

Remember kids, nothing good ever happens on Twitter and if you're spending a lot of time there then there's a huge chance you're going to regret it one way or another.
This absolutely fixes Bobby DROP TABLE. The source of truth on how long the user's name is is just the length of the user-supplied slug.

From the XKCD:

Robert'); DROP TABLE Students; --

The issue here is that

');

Is being intepreted as the end of a string; it assumes that there will be something like:

format("SOME_FN('%s');",user_name)

going into SQL, and this fools the system.

SQL solves this already with parameterized queries, and many HTML libraries also solve this in various ways, but if it were instead:

format("SOME_FN(%d:%s)", len(user_name), user_name)

then there is no value you can put in user_name that will let you escape the function call.

Length prefixes are one way of working this, but only scratch the surface of the issue. As others have pointed out, it's also the fact that the control elements are inline with the data.

<p:25><script:14>somethingBad()

Will still run somethingBad(). You are at least sandboxed to the containing element though, so restricting certain elements to only appear in parts of the HTML tree could prevent this (e.g. if all scripts were disallowed in BODY then merely constraining user-generated content to the BODY would work; right now you could still get hit by someone including </body> in their content.