skysight-inc/HackerNews huggingface dataset:
Perfect example. The Europeans moved on the Americas before they understood disease pathology, resulting in the deaths of up to 90% of the indigenous population.
Stored XSS requires some sort of backend, yes, but reflected and DOM-based XSS does not. Furthermore, all XSS is some variant of a contextual confusion where something that wasn’t intended to be interpreted as JS suddenly is.

jQuery makes XSS more common in several ways, and some of them are really just the influence jQuery on the frontend has on how the back end works. Some of those ways are pretty subtle, eg CSP bypass gadgets in data attributes (which are very commonplace in jQ libraries). By contrast, React, by building a DOM, has contextual information that jQuery lacks. Go’s HTML templating is unique on the server side in that sense since it too actually understands if it’s in a text node context, a script context, an attribute context, or an inline JS (such as onclick) context, and hence the correct way to treat arbitrary input.

Of course, it’s not because you use React you’re immune. I got XSS against every site that used ZeitJS for example. But the pattern that lead to that (generated code dumped into a script tag) is a common pattern for pre-React frameworks.
That and also distribution. One of the hardest part of breaking into enterprise is selling, and once big companies have a sales motion in place and locked-in customers (both in data on their platform and internal processes), penetrating crappier products into the market is increasingly easier so the quality bar goes down to some extent.
I'll summarise your advice as "Get off the beaten track and explore."

This is good advice and it applies to any touristy destination.
There could be collisions where `fname2` is the same for different pages; resulting in unintentionally overwriting. A couple possible solutions: generate a random string and append it to the filename, set fname2 to a hash of the URL, replace unsafe filename characters like '/' and/or '\' and/or '\n' with e.g. underscores. IIRC, URLs can be longer than the max filename length of many filesystems, so hashes as filenames are the safest solution. You can generate an index of the fetched URLs and store it with JSON or e.g. SQLite (with Records and/or SQLAlchemy, for example).

If or when you want to parallelize (to do multiple requests at once because most of the time is spent waiting for responses from the network) write-contention for the index may be an issue that SQLite solves for better than a flatfile locking mechanism like creating and deleting an index.json.lock. requests3 and aiohttp-requests support asyncio. requests3 supports HTTP/2 and connection pooling.

SQLite can probably handle storing the text of as many pages as you throw at it with the added benefit of full-text search. Datasette is a really cool interface for sqlite databases of all sorts.
https://datasette.readthedocs.io/en/stable/ecosystem.html#to...

...

Apache Nutch + ElasticSearch / Lucene / Solr are production-proven crawling and search applications:
https://en.m.wikipedia.org/wiki/Apache_Nutch
I overuse sarcasm in reality to the point that people don't believe me when I'm sincere, so no surprises I didn't write this out clearly enough :D

Seriously though I think if it's all JS based you should be good to use incognito and offline to gate off the code from uploading.
> Witness Australian Aboriginal Dreamtime stories ...

That is a ludicrous and ignorant caricature. Dreamtime stories encode vast amounts of information about locations, topography, history, local survival resources, and more. Read a bit of anthropology, or even just some pop/synoptic works (Lynne Kelly, Bill Gammage, Bruce Pascoe) and see if your prejudices emerge intact.
I'm new to Rust, so I wasn't aware. Thanks!
Plenty of these around me. Grow super fast, push out everything else, and are very hard to get rid of.
Maybe it is just you who doesn't have long vacations.

My relatives from Canada are constantly complaining how they have only 10 days of vacation per year yet every year entire family takes road trips that last 5-6 weeks.
Every second year they come to visit Europe.
> *"always bet on Javascript"

I've been keeping all the modern javascript frameworks at arms distance, because I've always preferred to bet on HTML, for the client at least. That said, I've no issues with heavy reliance on JS on the developer machine, but I always prefer pages that can work without the reliance on JS.

So, it seems opportune to ask: Is there a JS framework around that actually compiles to HTML and CSS rather than embedding the HTML in JS/DOM calls? In my rudimentary analysis of React/Vue and others (eg svelte), I can't find out how to have the end result without the framework sitting in there too. Perhaps I keep missing something in my understanding?
I'll tell you more. Much of the world is run by "horribly out of date" systems that nobody has touched in years _because they work_. And it all works fine. No "cloud", no Rust or Go rewrites, no Haskell, no fancy javascript frameworks or anything like that. Just boring ol' files, boring relational DBs with boring schemas, constraints and stored procedures, boring old languages, boring old hardware, boring old operating systems underneath it all. Don't screw with it and it will work for a decade. Start screwing with it and it will be busted every month, like Google Cloud.

You can't create "technical debt" if you don't change anything in the first place.
Yelp | SRE/Infrastructure Engineer | Full Time | San Francisco, CA | Onsite / Remote in North America | https://yelp.com

Yelp is a popular review website with over 60 million monthly active users on our desktop site alone.

We're looking for SREs and Infrastructure Engineers to join our Production Engineering and Compute Infrastructure teams.

I'm one of the hiring managers on the Compute Infrastructure team. We're a diverse group of ~15 spread across California, London and Hamburg. We handle the clusters that run the stateless services that power the website, along with all of our Spark and batch processing infrastructure. Technologies we use include: Mesos and Marathon (we're one of the biggest open source users of Marathon), Kubernetes, Docker, Terraform and Puppet. Work on our team is very high impact and supports a large number of both internal and external users.

I'd love to talk to you if you're interested in a role on our team and have either experience in distributed systems, reliability engineering or any of the specific technologies we mention. Right now we're looking for engineers with 2 or more years of experience to join our team[1].

If you're interested, please drop me an email at sunilsh@yelp.com with a brief note about why you're interested in this role and a resume.

[1] If you have recently graduated, we'd love to consider you for our university program: https://www.yelp.com/careers/teams/college-engineering
Works on firefox for me 67.0.4 (64-bit)
It ain't just about speed, though. If TypeScript is able to prevent entire classes of bugs, then that lowers the ongoing maintenance costs relative to the costs of maintaining the non-TypeScript version. It'll also make implementing new features easier and faster (and therefore cheaper) in the long run specifically because of that avoidance of bugs interfering with delivery of those features. Both of those factors can (and often do) easily outweigh the upfront cost of porting everything.

Even speed alone, though, can help substantially reduce other more tangible costs; if your TypeScript backend is faster than your non-TypeScript backend, then that translates to needing less server resources to achieve the same result (and/or being able to handle heavier loads without needing to upgrade or expand your server resources).
Lots of catastrophes came true. Your example of the Cuban Missile Crisis is particularly odd: there was nothing at all overblown about the worry, and there’s a pretty good case to be made that the fate of the world came down to a single tired, sweaty guy in a submarine making the right decision.
LNG is also common.
AFAIK Cloudflare isn't in any way a "customer" of Verizon. Verizon doesn't owe Cloudflare any kind of response or devotion of resources. Verizon owes it's actual customers a resolution to their problem, which they gave.

I'm not saying Verizon is perfect nor absolved of fault, but Cloudflare was/is not owed any kind of explanation or assistance by VZ, and it's absurd of CF to still be whining about that fact (as they are doing in some other tweets today). If CF wants some kind of SLA with VZ, they should engage them in a business relationship, not try to publicly shame them.
Without relying on "ethics" then, what is your justification that more resources should be allocated for this?
I said they're boring, I didn't complain that I can't play them :)
Better That 10 Innocent Men Be Murdered
Phasing out CFCs was much easier to do because CFCs do not make up the backbone of the global economy the way fossil fuels do.

There were some hacks in the aerosol and chemical industries who tried to deny that it was a problem (the chairman of the board of Dupont declared that ozone depletion theory was "a science fiction tale...a load of rubbish...utter nonsense"), but they were small fry in relative terms.

The bottom line is that too many powerful peoples' wallets are lined with money earned by burning fossil fuels. That's why there is no Montreal Protocol for carbon dioxide.
I visited Venice about ten years ago. Definitely true that some parts are crowded and some parts empty. I visited the Jewish quarter (Venetian ghetto) midday and it was completely deserted. There was a closed Jewish museum, a run-down synagogue in need of repair, also closed, and a Holocaust memorial. But not a single sole in sight! I was completely alone on the square for several minutes.
Not exactly-- it's complicated. Concur is an expensing product that also has a corporate travel booking UI platform that sits on top of travel management companies (TMCs), some of which have their own portals with phone lines and chat services.

Just curious (not trying to sound snarky)-- Do you use Concur? If so, I'm curious if you prefer it to booking travel yourself. In research, we only met one traveler who was satisfied with Concur, and it turned out that they had an assistant using it for them. Our goal is to make a travel tool that's an employee perk and a joy to use, and one that saves the company even more money through saving employee time.
> Many of the poorest billion simply do not realize that it is against their interest not to, for example, dump chemicals and trash in water they drink from and bathe in. Or just simply that littering is a problem.

To be fair to the poorest billion, the richest billion also doesn't really get this either.
The NSA's Regional Cryptologic Centers
thank you very much for your candor!
They might. My sister and I would crush up plants when we were little to make “potions.” We stopped when we made a potion with Serrano peppers at my aunt’s house in Mexico, at least it wasn’t some deadly plants.
I believe we'll eventually get our act together and survive with some pretty serious damage to the environment. When people are sufficiently desperate, you'll see more change.

You can get ahead of the eventualities and help by learning how to survive without the use of fossil fuels which is difficult but more or less achievable today. Use electric bikes, cars and motorcycles. Work remotely. Try to find an efficient home. Live in a climate that doesn't require too much heating or cooling. Eat vegetables more and so on.

I know you didn't ask for it, but there is a political factor too. Vote for politicians who take the environment seriously. There are industries that need regulation. No matter how much you're trying, if they aren't, progress on the solution will be slowed or stopped.
That doesn't address my question.
From IP ID to Device ID and Kaslr Bypass (Extended Version)
$ host news.ycombinator.com
news.ycombinator.com has address 209.216.230.240

https://whois.arin.net/rest/net/NET-209-216-230-0-1/pft?s=20...

M5 Computer Security

https://www.m5hosting.com

Unrelated: https://begthequestion.info/
Nope, I didn't actually. Which is funny and makes a bit more sense, since I haven't seen a full disk cause bad locking like that since around the date of the article. Still, this never should have been an issue, since disk space monitoring shoulda prevented the problem from ever happening in the first place.
That's true, but unlike PC there's a used market for console games. $10 each is the norm even for newer "AAA" titles.
Yes, absolutely. Put enough money into it and scientists/startups will figure it out. I'd like to see someone prove that we can't reverse most of what we've done (besides extinction of different species which is obviously bad).
Shouldn't the developing world embrace the diversity the Imperial governments had the forethought to design into the boundaries.

It could be their greatest strength.
None - not planning on gathering until there's a usable MVP, which is the aim of bringing someone on board. My plan for customer acquisition is to reach out to 100 content creators and give them $10/mo to distribute for free (paid out of pocket by myself) to seed the platform. Targeting creators should give an artificial boost to NPS that will attract more users.
> I believe we'll eventually get our act together and survive with some pretty serious damage to the environment.

I agree that it will take some pain before we get behind fixing the problem. My concern is that once it is painful, we won't be technologically capable of saving the planet.
Eeeeeh there's always something new. At this point unless it's legal trouble I don't pay attention to any negative article about Tesla -or any article in general-. I just look at the quarter numbers.
Advocating for assaulting and murdering fellow people in your country will result in Visa, Mastercard, American Express & Discover pulling the plug on your merchant account.

All the payments networks have morals clauses in their payments contracts, InfoWars blatantly violated said contract and has kicked up a fit over First Data doing what they are contractually obligated to do.

Some of the frontends like First Data can be very restricitive with their own morals clauses, banning bars, sex shops, book stores, and various other "wrong think". Bitcoin and other schemes will never have a reliable connection to the USA's current payments system due to this type of embedded moralizing.
https://github.com/golang/go/issues/32437
I once knew a girl who was visiting the US from a city in Brazil and she was shocked by squirrels and the fact that we just let them run around our cities and do whatever they do.

She was a little worried about attacks or food theft, but eventually she saw they were harmless. Even then she'd still excitedly point them out everywhere she went.
I'm optimistic that Earth (our environment) will survive, but I'm also sure that it will be less hospitable for human life. If catastrophe is going to happen it is more likely that it will be human-induced catastrophe (wars, genocide, famine) rather than environmental one.
Been using Go for ~4 years and I agree - although I would like to see more documentation about scaling error handling in production codebases however.

Controversially I do support generics in go2.
Indeed, how's the water in Michigan, and even "recycling" in the US means the trash gets shipped to Asia/Africa to be burned.

It's "lack of information" or in this case being mislead by whoever promised them their recycling is contributing to being green...
Poll: Compensation/Salary for your work (2019)
What is your opinion about your current wage?
Fairly compensated
Underpaid
Overpaid
Announcing General Availability Of: PCI Compliant Payments over the Phone
but can i use it to mine bitcoin?
Early morning is gorgeous, we stayed before near Arsenale and I would go on a run every morning around 6am. It is the most beautiful city I ever been in a that time. It is a tourists attraction mainly now but still running alone through it is pretty amazing.
I’ve got two young kids, sometimes I think they might be okay. I don’t have any hope for my unborn grandchildren. At my most pessimistic, I wonder if I should investigate some sort redoubt to help them prepare. But who know what you really need to prepare for. It just feels so hopeless sometimes.
You don't know for sure whether it's good. You may know for sure that it's bad.
Your relatives are retired, or are taking unpaid leave.

I'm not speaking for myself, I'm speaking for the vast majority of the world.

Do you seriously think that tourists from China, Japan, India, and the US have 5-6 weeks of vacation every year?

To be so blind to your own privilege...befuddling..
I am hopeful. We're in for a rough ride, but we will survive.

1. Rate of progress and market adoption of key technologies (ICE alternatives and renewables) is much higher than I would have anticipated even 10 years ago, let alone 15 years. I am hopeful that, even with only market forces, by the end of my lifetime developed economies will have more-or-less righted the ship on GHG production with a corresponding blueprint for the rest of the world.

2. I think we still have a long time before some of the worst-case feedback loops are triggered.

3. The realities of climate change are becoming difficult to ignore. This is, paradoxically, good news because it makes denial a less tenable barrier to action in the mid-term future.

All that said, I'm hedging my bets with real estate investments in regions that are most likely to benefit from mid-term impacts of warming.
> On PC the prices of games is usually less while they are at full price and massively less while they are on sale which is a quite frequent event

That's no longer true; sale prices for the same game on console and the game on PC are typically the same. Additionally, retail sales prices often are synced with digital prices.

> When I look at console games I almost never see any significant sales.

On the digital storefronts, all 3 major consoles have weekly sales, and often deep discounts for special events.
> C does work pretty well

The GCC team thinks differently, since GCC moved to C++ [1]

[1] https://lwn.net/Articles/542457/
Are there particular factual issues you have noticed in the article, or are you trying to poison the well?

https://www.logicallyfallacious.com/tools/lp/Bo/LogicalFalla...
Ask HN: How much would you charge to mentor an aspiring entrepreneur?
If you've seen success in your entrepreneurial endeavors, would you be willing to spend some spare time mentoring an aspiring entrepreneur? By "mentoring" I mostly mean having email conversations when you have time to respond to any questions asked. For example, imagine a young web developer who's attempting to start another business, but wants to avoid mistakes he may not even know he could make.

What factors would influence your decision?

How much would you charge for your time? What would be expected of the "apprentice"? What would make it worth it to you?
I think that there needs to be an equivalent of a climate 9/11 event. Maybe Miami getting wiped off the map by a category 9 hurricane (and call me a pessimist but the loss of a city in a developing country to climate change just won't register in the minds of the developed world).

We as a species are very emotionally driven and slow trends and statistics just aren't as compelling as a big event. I don't know how bad the environment will have to get for that to happen though.

Otherwise, the people creating the most carbon emissions will just view this as an inconvenience and crank their AC higher. The numbers involved in the reporting (2C, 3C etc) just sound small and insignificant when in reality of course that's just an average.
I come back a lot to the parable of "who's to say what's good or bad?" (one telling of which can be found here: https://thepowerofthrift.com/whos-to-say-whats-good-or-bad/ )

My more specific take: As a human of generally European-ish descent born in the United States, the wave of extinctions that gave land-dominance to mammals, the likely genocide of closely related hominids by the homo-sapiens, the ecological changes putatively caused by the first wave of human occupants including all the extinctions of large land animals on this continent, the subsequent genocide of the first human occupants, the conflicts and wars that caused my ancestors to emigrate, ... those were all necessary conditions for the exact experiences I've had in my life.

I'm not saying I support genocide! (my ancestors are mostly all Jewish.) I'm just saying that the farther something is in the past, the more it just seems like a fact of history, no matter how miserable and wrenching it was for all the organisms that lived through it.

We have no way of knowing what we're really creating, and it may well be that we're creating a hundred thousand years of extinctions and inhospitable weather which will be more difficult to live through for our descendants than the conditions we were born into. We may be radically shrinking our own natural habitat. We may be paving the way for a different dominant organism. We may be living in an era that future humans will give as much thought to as we give to the years 1000-1100 C.E. Who knows! and in the long game, the thousands and millions of years perspective, who's to say what's good or bad?
It's also about 1000x slowdown during recording, where rr is < 2x.
I suspect the main advantage of a system like this (basically, userspace code is run in a software VM) would not be code synthesis (though I do think that is also useful), but the fact that there's no longer an expensive boundary between "user" and "kernel" code. A system call would simply be a regular function call; there would be no use of interrupt handling or manipulating/switching page tables or ultimately any use of an MMU.

Once this boundary is removed, we won't need things like userspace buffering, which exists to circumvent this expense at the expense of some odd user behaviour:

$ cat | grep a | cat

Ultimately, I do think that OSes will go in this direction. As mentioned in the article, there are currently things like eBPF in Linux which take advantage of this. I don't see why we couldn't have a kernel which supports both running VM code in "ring 0" but also supports a Linux-like VM mechanism for running computational code which would be compiled sub-optimally by the software VM. Presumably this functionality could be implemented directly into an existing OS, so it wouldn't necessitate some major switch.
eatsa | San Francisco, CA | Onsite

www.eatsa.com

Come help build restaurants of the future!

At eatsa, we’ve built an end-to-end software as a service and hardware as a service technology platform for the restaurant industry that encompasses everything from food ordering, food pickup systems, restaurant management, and customer loyalty programs. We're the only ones in the market currently tackling a huge issue restaurant operators have: too many systems that don't talk to each other, and no easy to collect actionable operations and customer behavior data.

Key hires we're currently looking for:

-Senior/Staff DevOps Engineer: https://www.eatsa.com/careers-open-positions?gh_jid=42531600...
-Sr. Android Engineer: https://www.eatsa.com/careers-open-positions?gh_jid=41378620...
-Staff Backend Engineer: https://www.eatsa.com/careers-open-positions?gh_jid=42517740...

You can learn more or view all our open roles here: https://www.eatsa.com/careers

Apply online or ping me at ashleyt@eatsa.com
I was considering building a system similar to scroll, but now that it exists and is in use... that’s nice :) I hope things go well for them!
First things you run on login?

It ought to be monitored with alerting by default and inode use too.
Have considered you that suck conditions race more with threads and shared memory parallelism?

If your counter-suggestion is Rust, have you considered.unwrap() that.unwrap() thinking.unwrap() about.unwrap() managing.unwrap() memory.unwrap() all the time might not be the wisest choice and that a GC is a useful abstraction to have?