skysight-inc/HackerNews huggingface dataset:
Afaict, the state of SQL as a grammar with tooling is kind of pathetic.

As a standardized language, it doesn’t really exist; everyone implements numerous extensions, and almost no one is fully ansi compliant

Almost all formatters attempt to be generic (believing standardization exists), and fail to support the full grammar for any dialect.

Across the board, all parsers have pathetic error message support (error on line 3, which is actually just the start of the statement).

The schema offers type constraints, but querying/ide’s extract no value from that (that is, types are statically specified/constrained, but query editors all pretend its fully dynamic)

Theres a lot of awkward nonsense, like where clauses are parsed before the select in most parsing engines, causing alias usage to fail without wrapping in a subselect/with clause

The grammars themselves are an inconsistent, ad-hoc mess

The grammar is also unnecessarily context-dependent (eg from must follow select, and where after that), making programmatic composition unnecessarily difficult

I don’t know how much of the tooling issue is a result of SQL as a language versus the history itself, but I can at least confirm that trying to parse multiple dialects is absolute hell, which would at least explain the sorry state of affairs for eg formatters.

But the majority of its expressive power derives from the relational algebra, and has nothing to do with the SQL grammar, and thats the majority of its value. It seems obvious to me that at the very least the compositional issue of SQL, and its self-inconsistent grammar, should be vulnerable to near-lossless improvement without too much struggle, though I can’t say what the alternative would actually look like.

But it seems like its riddled with a lot of unnecessary flaws
I could not name a single microtransactions game that offers a similarly deep or atmospheric or satisfying experience as, say, Breath of the Wild, The Witcher 3, Final Fantasy X or a round of multiplayer Mario Kart. Can you..?

Virtually all free to play and free online games I know are exploiting human psychological vulnerabilities in some way or another to keep you playing. Those games leave me completely unsatisfied.
Most common SQL statements read like somewhat stilted english. Many non-programmers find this particularly accessible.

Yes you can make some lovecraftian horrors if you really want to, but SQL is one of those things where just a little bit of knowledge goes a long way. If you can understand the basics you can get a lot of work done.

It's a lot like Excel. You can do some really complex confusing stuff in Excel. But you can also teach the basics to non-programmers quite easily, and command of the basic skills will be very empowering. Basic knowledge of Excel, like SQL, gives the user new ways to leverage computers when creating their own solutions to their own problems.
You’d still want to test. And if it was increased, the next thing to test would be whether a 10% increase in baseline respiratory rate was benign. It’s not obvious that it would be, since breath is so tightly regulated.

OP spoke with rather more certainty than warranted.
The demo is neat, but I'd like more details before I give you my email address.
> Second, we immediately pushed a hotfix which suppressed re-validating the signatures on add-ons.

What’s the point of re-validating of installed add-on in the first place then?
US Senator Declares War on Predatory Game Loot Boxes and Microtransactions
> Shouldn't it be impossible to generate a new cert (with a different expiry date) that ends up having the same public key as an existing cert?

If you have the secret key of the original certificate, you can use the same key material, and just use different meta data (like expiry date).
I think what people are going to find out is that teslas last a lot longer.

I've seen tesla model s cars with 300,000 miles on the odometer.

You have to think in terms of range * cycles.
I'd hope that those conflicts only occur on writes and not reads?
Level 1: The people who just go to the site/download the APK

Level 2: The people who realize that the requested actions are likely unsafe, and complain about it

Level 3: People who realize that this is part of the challenge and just use a VM

Nobody on HN is "this dumb", if you want to participate in a challenge with an intelligence agency, take the proper precautions
Preferable to the passengers, but not to Boeing, because that little warning light would warrant retraining and re-certification of pilots.

It's why they didn't do it.
> If the waterbed metaphor isn't taken literally it informs of nothing we don't already suspect.

It informs you of nothing you didn't already suspect. I think it's useful to remind people of something that's fairly obvious ans self explanatory if you think about it, but not everyone does, and having an easy and slightly odd metaphor to point to helps the point to get across. The fact that you think it's obvious is actually one of its major benefits. You can immediately start exploring the consequences of it instead of spending time proving it. Honestly, of all the criticisms to level at a metaphor, "too obvious" isn't one I would consider worth bringing up. Obvious metaphors are used to good effect all the time.

Edit to address your prefixed paragraph:

> The waterbed theory in fact explicitly states that the amount of complexity is preserved no matter how it is distributed.

If you read carefully, it says that the minimum level of complexity may not be reduced. Who is to say the minimum level of complexity has already been reached? Or that pushing down a level above the minumum in some area won't cause only the minimum level to rise elsewhere (or vice-versa)?
The article clearly states that his home country did care, albeit only through family connections to the top.
If you deconstruct the APK, you'll find a C script that prints a message - "You really think it was the Saudis? :)"
/s
I use ORMs
I wouldn't say we're there, but that's certainly the goal.
Blue Moon
Wither 3 would require me to take holidays or ignore familly duties for weeks. Aaand it is not the kind of game I ever liked anyway (even if I had that time).

I understand that other people like it, but these games are not for me.

It is very similar with other games you mentioned. Not for me at all (maybe Mario kart would be exception for occasional play).
I think the reason was probably that the vast majority of Firefox users, if asked, would prefer that they did this. Not too many would say, "I am willing to participate in your study, but please don't fix my browser's add-ons if they all break". Sure, approval might not be 100%, but it would be something well north of 90%, and they probably took the right action.

Given, of course, that the truly right action of not letting the certificate expire in the first place, was no longer possible.
There's also something to be said for real type safety and high performance numerics for which Javascript has to be twisted to achieve part way.
_we_ are the government.
I don't know, but if I had to guess it's a lack of regulatory framework to protect the rights of workers against corporate abuse, combined with modernization of many industries worldwide making US employees less competitive (valuable) on international terms.
I disagree with the article, however it is important that we challenge our assumptions. If someone can show me something better than SQL then I'm all ears.
> There is no reason you shouldn't be able to use this hardware 10~15 years from now. People use old Apple IIs and C64s from decades ago.

And you still can, you just won't be getting updates. Just like Apple IIs and C64s from decades ago don't get any updates.

It's not like 6.5 years after release it just immediately refuses to power on anymore, it still works
Common rich person move. Something only becomes unethical and awful after you get rich off it.
I read and enjoyed https://github.com/kohsuke/args4j. I don't know if it's the "best" code put there but it was comprehensible and I learned a lot from it when I was new to Java.
Nextdoor is a gigantic advertisement for Ring and Nest products.
My kids' middle school had a similar problem. For example, three kids out of a hundred would cause a problem during lunch, so all hundred kids in the grade had to sit in alphabetical or some pre-determined order for the rest of the year. My kids said everyone including the teachers and kids knew who was causing the problem, but everyone had to pay for it. I think the school was afraid to single out the "trouble makers" (they were just throwing food or yelling or some other typical bs) and contact their parents, so they just made all the kids pay for it.
> International flight booking records are bordering on being a public record. Remember that when you fly around

Also remember that when someone with your last name, first initial and DOB flies around.
Isn't that the point of having the root cert and the intermediate? Otherwise, why not just have everything keyed to the root?
AFAIK the public and private keys of any keypair, like the intermediary, are always linked. You can not have a new public key with the same private key.

But you can always re-sign the same keypair from the root with a new, non-expired certificate. And since this keypair (the intermediary) signed all the individual add-ons to begin with, it will just magically work.

Remember that certificate is nothing but a message that is signed by some "higher" keypair, which says that some "lower" keypair is trusted.
The majority of the population is Level 1. Consider what that means for Mossad.

Enjoy your challenge.
The literal ascii blob of the signed key would be different, because (for example) the "Valid Until" date has changed — but they control the private keys for the signer and the intermediate, which means they can issue a certificate that is logically identical from an X.509 perspective other than fields that either time or randomness contribute to. (Serial number would not necessarily be randomized in this scenario.)
Definitely it has come long way, the model 3 i have has not creeks or anything like that and with infotainment sure Tesla needs bit more features to be added on bluetooth integration but, I love the simplicity of the car is hard to describe and cockpit on the car almost feels like a spaceship. I almost feel I am outside the car and not inside.
Ask HN: Skills needed for Corporate/Production marketing website?
You see all the nice landing pages, and marketing websites, such as Stripe, Digital Ocean, Docker, among other great ones, of course. Who are the people building and designing these websites, and graphics? And what skills are needed? Of course an engineer can build HTML pages, but some of these websites are very beautful. Is this the job of a UX engineer, or graphic designer?
If you consider news like https://www.redhat.com/en/about/press-releases/leadership-op...

.. it doesn't seem they're hugely afraid of openjdk
Your point seems a little like tilting at windmills to me. Different databases written by different entities who didn't have a huge incentive to strictly conform to each others syntax varied in their implementations. This is just life.

> It's worse than x86/PPC/ARM

You're... saying that there should only be one CPU architecture too?
I said that politicians are failing at their duty. Duty and morality are different concepts.

Businesses have a duty to make money, politicians have a duty to work in their constituent's best interests, only one of the two is failing in their duty but they're both acting immorally.

As an aside calling another post "dumb" is quite clearly against the site's rules. You're welcome to disagree but the civility is lacking.
Having kids brainwashed and immersed in state-level cults is also a real risk, and the costs that society, and other societies, have to bear (even before these kids "wake up") is something I believe every civilization is familiar with after the twentieth century (particularly Germany...), and far outstrips practically every cost ever borne by modern societies up until that point due to cults and homeschooling.
The last reactor at Three Mile Island is shutting down
I’m assuming you’re trolling. Having said that, I will address your comment anyway, as I want to counteract the nefarious forces aimed at oversimplifying complexity.

There is never just one “problem”. Prices are just the result of various dynamic forces in the market: supply, demand, regulatory burden, availability of capital, technological development, corruption, etc.

A competitive market is much more efficient at establishing what to produce and at what cost & price, since pricing is a dynamic process. Some entity establishing prices artificially will lead to market decay.

Sadly, the medical services & products markets in the US are not open to much competition, and one consequence of the regulatory burden is that it prevents other companies from entering the market and allows for all sorts of abuses from existing players.

Please note that I’m not arguing for no regulation whatsoever, but regulation of the senseless kind is hard to come by.
The "We need a gif replacement" discussion isn't quite in xkcd 927 territory yet, but its very close.

And that is what is working against something completely replacing it.

https://xkcd.com/927/
Interesting, thanks! Indeed, there isn't an equivalent feature in MySQL yet.

Out of curiosity, how commonly is this used at scale? I'd imagine there are significant trade-offs with write amplification, meaning it would consume a lot of space and make writes slow. (vs making indexes on specific expressions, I mean. That said, you're right -- there are definitely use-cases where making indexes on specific expressions isn't practical or is too inflexible.)
It's not about "is the homeless situation here terrible". It's that there are organized groups in Seattle that claim the city is too dangerous to live in because of homeless drug gangs, and that's nonsense.
As someone who reluctantly re-enabled Studies to get the fix, I appreciate this.
I suspect there are two reasons we get more spam phone calls:

1. There's no effective signing on phone calls, so spoofing a phone number is easy. This makes it impossible to prosecute spammers.

2. There's no way to filter a phone call based on the content of the phone call before it arrives. It's possible to spoof senders on email and text messages as well, but it's also possible to filter these based on content before they reach your inbox. This isn't perfect, but it greatly reduces spam in text-based mediums.
I guess you have not driven a Tesla yet. I would recommend experience Tesla for more than a day it just changes everything.
Yeah I agree with you on this one. Especially because as another user posted earlier, they are going through and deleting all telemetry and usage statistics for their entire user base during the time period that this was needed to be enabled.

This seems like a very good compromise and is honestly more than they needed to do imo

https://blog.mozilla.org/blog/2019/05/09/what-we-do-when-thi...
Chrome extension to control video speed on Netflix, Prime, Twitch, etc.
It could happen. However, the probability of success for any given attempt is low. Consider all the attempts at improving on JavaScript before Typescript.
> Second, we need a mechanism to be able to quickly push updates to our users even when — especially when — everything else is down.

They should simply streamline the "normal" updates for that purpose, not invent the new "channels."

Specifically, not all binaries in the directory should be changed just to push an update where only few lines of the code are different.
Yes, I've thought about that a lot. I agree with you that the economics are off—not in terms of money, but time and energy and attention. If that could change, then the pool of interesting projects and articles might grow, which would be great for us all.

How would you go about it?
Anbox[0] does exactly what Google made available for ChromeOS in reverse: it runs Android apps inside Linux containers.

[0]https://github.com/anbox/anbox
Mozilla extension to control video speed on Netflix, Prime, Twitch, etc.
Report it here, https://safebrowsing.google.com/safebrowsing/report_badware/
When you share a post on Twitter or Instagram, you're creating a Facebook share--this isn't an example of an open protocol in any way.
Yes. Just one problem I discovered recently is that no other format does looping properly.

With a GIF, you can right-click and save it, and all the looping info is inside the file. The quality is crappy, but it just works.

With all “proper” video formats, looping info is metadata, stored separately.

You can’t even go for something slightly more modern, animated PNGs, because there are warring formats and very few tools that support them.
Python used to have Google as its sugar daddy supporting the BDFL. It's doing fine even though it's no longer the new hotness and Google is only sponsoring < $100K/yr.
A CSS Pixel and a Kiosk Walk into a Bar
> I know for sure when writing this query that the middle join to mapping_table will map every some_table row to exactly one row (no more, no fewer) in mapping_table.

Your example query joins one some_table row with 1-n rows on mapping table, and another 1-n rows from whatever else is in there to that. If you're expecting a single row in the resulting set per some_table row, it means that you're filtering very hard (which is fine) or that you've a schema problem (which is the actual problem).
> because they want to run old-style add-ons, but many of these now work with newer versions of Firefox.

Except it wasn’t working for this few days. Anyway older versions of Firefox wasn’t signing add-on, so they are not concerned by this fix.
That is true. It's intentionally trying to obfuscate the information.
Imogen Heap Is Building Tech to Change the Music Industry
shattered pixel dungeon is one such example imo.
Are you kidding me?

For one example, see American Express's Merchant Operating Guide

https://icm.aexp-static.com/Internet/NGMS/US_en/Images/Merch...

See section 10.2 Prohibited Merchants. There's a whole list of them. Here's a select few:

Multi-level Pyramid Sales, Prostitution, Payday Lenders, Timeshares, Gambling, Virtual Currency, Escort Services and Non-Licensed Massage Parlors, Mortgage Payments.
Yes, that's what I said, and why I hope they will expand VP* support in the future.
F5 acquires Nginx: What to expect from the deal
As someone who opted out of Studies after the last abuse, I felt betrayed that my addons were, effectively, held hostage behind enabling both telemetry and Studies. I decided to wait.

It’s bad optics at the very least. Users who opted in for the update were in fact entered into studies they explicitly wouldn’t have wanted to be in without the lure of an earlier update.
Before reaching out to words like "abuse" for what is ultimately a hotfix, perhaps you should read the article. In particular:

> Second, we need a mechanism to be able to quickly push updates to our users even when — especially when — everything else is down. It was great that we are able to use the Studies system, but it was also an imperfect tool that we pressed into service, and that had some undesirable side effects. In particular, we know that many users have auto-updates enabled but would prefer not to participate in Studies and that’s a reasonable preference (true story: I had it off as well!) but at the same time we need to be able to push updates to our users; whatever the internal technical mechanisms, users should be able to opt-in to updates (including hot-fixes) but opt out of everything else.
Author here: I've uploaded the GIFs here https://github.com/singhkays/its-time-replace-gifs-with-av1-...
> I'm surprised this doesn't have a name

Isn't it just the principal–agent problem? Both the tax preparers and the government are agents of the people, but the government acts in its own interest (by not developing its own system) and TurboTax acts in its own interest (by misleading people into paying for something they promised to offer for free).

https://en.wikipedia.org/wiki/Principal%E2%80%93agent_proble...
For the time stamp method to work, you need a trusted mechanism to attest that the timestamp is correct, otherwise the mechanism is useless (an attacker with an outdated private key can just backdate the timestamp in the executable and then sign it). Windows code signing uses a server Microsoft runs to provide this, and Mozilla would need to do the same.

I’m not saying they shouldn’t, but it is a significant piece of complexity.
It's interesting but whoever put that animated GIF in as the primary image when the story is shared should be shot. How mortifying to text this link to someone and subject them to endlessly repeating animation when they open your message thread.
We Can Do Better Than English. It is full of strange grammar and inconsistencies. The tooling for checking grammar throws false positives. In fact all it has going for it is that billions of people already speak it...well I suppose that is a pretty big advantage.
With due respect, Datalog is a very difficult language to learn, and it just doesn't have the support and resources SQL does. We were forced to use it in a Data Cleaning course a few years ago because the professor was big on it, and everyone struggled. To this day, fellow students complain about that part of the course. No one ever looked at it again after that class.

Datalog will ALWAYS be a niche language, because it is designed for a certain type of computational mind. The vast majority will want to learn SQL due to its ease despite any shortcomings it may have.
They’re not the same thing; Swift is “automatic” and Rust is “atomic”; Swift’s ARC is implemented the same way as Rust’s Arc, but Rust’s is manual.
This was a nice prompt for me to finish my ASPICE article: http://beza1e1.tuxen.de/aspice.html
I had no problem with the site.
Likewise, I'm sure he cares more about keeping good working relationships with his colleagues than about what the reader thinks of his choice of paragraph order. A manager who makes his team feel insulted is not conducive to producing better software (which is presumably what you care most about here).
It’s a lease to own, so after the 24 months, it’s yours and you don’t pay anymore.
They do it frequently. I've had it happen several times. The specific text isn't particularly exciting. They just give you a link to resubmit if you're interested. You also get an extra upvote upon submission (and I imagine there is more of a bump behind the scenes).
> For the other groups we are developing a patch to Firefox that will install the new certificate once people update. This was released as a “dot release” so people will get it — and probably have already — through the ordinary update channel. If you have a downstream build, you’ll need to wait for your build maintainer to update.

Why not link to the xpi that can be installed now?
Thank you for the explanation. I'll update the article.
This appears to be a dupe of https://news.ycombinator.com/item?id=19868282
I have a completely honest question here that I'm hoping some people can answer. Is open source really more secure? My default answer would be yes absolutely but when I think about it I'm not sure I understand why.

If something is open source then bugs and security problems can be found more easily and then fixed. This sounds great to me and I'm sure that works out just fine most of the time. This makes me wonder though...are there really fewer intrusions into production systems that are built entirely on open source software than there are in ones built with lots of proprietary, closed source software? What does the data look like about this stuff?
Rust will certainly survive without Mozilla; they pay the CI bill, and that’s wonderful, but most contributors, by a pretty large margin, are volunteer.
Not receiving security updates on a modern computer intended to be connected to the internet effectively means it stops being useful/reliable.
An Instacart Order, Part 1: Building a Digital Catalog