skysight-inc/HackerNews huggingface dataset:
That's a reasonable point, but the reality is that a lot of people actively avoid the shelter system. (Including me.) So some people seeking shelter will be visiting a relative or staying in a hotel temporarily, not handily corralled like penned animals in the shelter system so they can be conveniently counted by the powers that be.

It's a myth that homeless people are all entirely penniless. Many of them have income, they just don't have enough income to support a middle class lifestyle.

Homeless individuals may have alimony, social security, disability, a retirement check or similar income. They may also work.

When housing is expensive enough, it's possible to have a full-time job and be unable to cover rent. Homeless individuals often have various personal challenges that make roommates even less desirable than average, and there are plenty of roommate from hell stories even without such issues.

My last two years on the street, I managed to go to a hotel periodically. Towards the end, this was about once a month.

When the drought in California finally broke with record-breaking deadly storms, I got up, saw my usual "safe from the storm campsite" was probably under 6 to 10 feet of water, and decided to take out a Payday loan to seek shelter in a hotel for three nights. This was, "coincidentally," late January.

You know, the part of the year when these counts get done.
Bogons?
If they charged the true cost of the grid and dropped kw pricing to the true cost, people would have little incentive to conserve the limited resource that is electricity generated.

It is more like the supply/demand has set a price for KWs and the margin the electricity companies make on it is used to subsidize the cost of the network.
Being multilingual alters your experience of time (2018)
Passport? State ID?
Just google "sorry for my bad english" - literally hundreds of thousands of examples verbatim!
> You're also discounting the need to have power after the sun goes down. If you compare roof top to mains, you really need to include the cost of a battery large enough to go off grid, which is at least another $10k, and quite a bit more if you don't want to have any lifestyle changes.

I don't think most people with solar are entertaining the possibility of going off grid. Rather they are comparing solar with net metering vs no solar. In that case, it is entirely appropriate to omit your suggested battery.
check out ocaml
Unrelated but does anyone understand the stolen bicycle economy?

I understand there is infinite supply but where is the demand?
It is not the bug now but bug in the future. It is whether you can trust a country that respect nothing human.

Can you even a campaign against anything once they take over your information infrastructure.

Yes NSA may do it but cf NSA with PLA ... what is your leverage. Hear of the word totalitarian...
Better Web GUI Development
They can potentially raise the rent (for the next renter if there's rent control) by advertising "modern double pane windows" which offer sound insulation from outside noise, in addition to the thermal benefits.
>The problem is that batteries are too expensive

Battery costs have been dropping rapidly, %35 in the last year alone. Starting around 2023 they will be low enough that the sticker price for an EV will be about equal to a comparable ICE car.

Given that EV operating costs are considerably lower, and that governments around the world are pushing EV's, sales of them are going to skyrocket. The big manufacturers have recently realized this, which is why they are switching their EV programs into high gear.
Other things like unusable symbols (e.g. IFG added to above) make it more nuanced than that.
Where does he has the "less mental problems in situation of hardship" from? I used to read a lot of survivors accounts from WWII and Rwanda and such and there was not such thing. Mental issues did not get better, they were harder to deal with and caused additional risk.

Also, suicide rates were higher suggesting that mental situation was not all that great.
None of your privileges has been removed, either before the post or after. What did you see that made you think that?
I'm pretty sure if you asked any given 8th grader what the difference between a neo-Nazi and a conservative is, they could give you a cogent answer.
Long road to freedom for farmworker accused of being notorious trafficker
We shouldn't seek to ban insurance or force them to work one way or another.

The problem you identified is correct but the solution isn't right. You should let people be free to choose to freely associate with one another (or whatever insurance policy they prefer).

Instead, get rid of legislation that makes hospital bills something awful for unensured people. Many things are driven by the insurance companies but others are by hospitals or even just politicians with bad ideas. Remove the barrears of entries and things tend to get better too.
> Just don't accept unauthenticated requests that make changes, and ignore CORS.

The problem here is that it’s really pretty trivial to scan a local network and get valuable metadata about the router and other devices on the network, just using JavaScript and xmlhttprequest. It’s not that the local services are at risk of being exploited, but the whole (average, unhardened home-) network could be compromised by identifying devices with known exploits and, well, exploiting them.

Now I’m trying to come up with a non-PITA way of isolating browsing from my local network while still allowing direct access to my local network!
How? It's specifically not a national ID, just a set of standards for state issued IDs.

It gets us closer in the sense that climbing a mountain gets one closer to the moon.
At first I thought it was a reference to Dilbert...
It's not a "grim historical event" to observe when people commit crimes and then throw them in prison for the specific crimes they have committed after a fair trial. That's approximately what would happen if you or I went around brazenly violating the law.

I think one aspect of this that is worthy of concern is institutionalization. A lot of our problems these days are a consequence of deinstitutionalization, but prior to deinstitutionalization there were a lot of hidden abusive practices in the institutions themselves. I'm not sure where exactly the pendulum should come to rest on that issue.
Amateurs developing a compiler != amateurs contributing to a compiler. Every popular project has clear project leads who guide most important decision making.

Not that I have any position on Julia
Also remember kids, alcohol is not a drug, even though it leads to more crime and deaths than any other drug in the US
Not in the US, but I have two meters on my house.
One meter is attached to most of the circuits, and charges the 24/7 rate.

The other meter is attached to the heater system, only works off-peak, and charges a discounted rate.

The heater is basically a slab of steel, wrapped in heating elements, surrounded by insulation. It heats up when the power is on, and temperature controlled vents let air circulate when it's cold in the house. Works ok, but I'll probably change it out for a heat-pump soon.
Here is the full post on Facebook’s Engineering blog: https://code.fb.com/android/hermes/
Yup! Some interesting demonstrations of this are in split-brain experiments - see https://faculty.washington.edu/chudler/split.html

However, when it comes to peripherals like heart and lung, the distribution goes beyond just the brain - the heart, for example, has a built-in pacemaker called the sino-atrial node [1], which produces a periodic signal with high precision; the brain just sends it signals to control the period of its oscillations.

Similarly, a number of reflexes which involve responses to physical danger (withdrawal from burns, knee-tapping) aren't actually handled by the brain; the spinal cord sends the reflex commands as soon as the sensory information hits it, to avoid the round trip all the way to the brain.

[1] https://en.wikipedia.org/wiki/Sinoatrial_node
I worked in a company that used custom DNS names to identify the environments:

- www.mydomain.com

- stage.mydomain.com

- local.mydomain.com

The last one referred to the version of the app that developers ran on their own machines. So they had a DNS-level entry that sent local.mydomain.com to 127.0.0.1.

This isn't a browser issue at all. I think the security issue is "applications can install local web servers" and "some local web servers are insecure".

We already have XSS controls in place to prevent a domain from accessing the contents of another browser window or an iframe.

It's not a browser issue. There are plenty of legitimate reasons for wanting a browser to access a local web server. It might not be common, but it's not illegitimate nor a security issue.
Its probably a shared codebase, I wouldn't be surprised if they had a monolithic OS and just had specific daemons to run things.
Mainframes.

> Visa, for example, uses the mainframe to process billions of credit and debit card payments every year.

> According to some estimates, up to $3 trillion in daily commerce flows through mainframes.

https://www.share.org/blog/mainframe-matters-how-mainframes-...

https://blog.syncsort.com/2018/06/mainframe/9-mainframe-stat...

https://www.ibm.com/it-infrastructure/servers/mainframes
It's definitely a terrible system, but if you have a pre-existing condition how fair is it to the next insurance company to take you. That's like taking your crashed car to Geico and saying fix it. There has to be some way that the insurance company can make money on the odds.
Runaway Regular Expressions: Catastrophic Backtracking
From AC/DC to Djent to Reality
True, but If it is balanced with the exports, then it is still zero overall. (eg. if your renewable exports are substituting dirty energy somewhere else).

I don't know what the current ratio is, but I do know that Rainfall directly affects the GDP of the country by almost +/- 1%.
Walmart is doing it in a lot of locations.

I've heard they also believe if electric cars get going they can offer free recharge with people buying xx dollars of groceries.
Your 1.45 trillion figure for the cost of the F-35 is the lifetime cost of the platform, including procurement and operations costs extending through the year 2070... the cost to date is nowhere near that figure.
good luck talking "seasoned programmers" into or out of anything. that's the real problem.
More like 30 minutes.

> between 2108 UTC and 2138 UTC
I've joined most of the social networks that pop up and check them out. Gab was bad at launch with crap, but trolls get tired when after awhile. Gab isn't even close to racist posters like voat hazing new people with crude/racist shock posts.

I think Gab offered a censored version to appease google store, but was still refused.

I find it amusing, that people create opensource software use diversity open source licenses, then exclude people that disagree over anything.

I find the best censorship is one that follows US law, because death threats will get you banned, and racists/trolls normally end up making one.
I recently posted a blog post that exposed a similar issue involving Chrome extension. The issue in particular is how LinkedIn makes local web requests to try an identify which extensions you have installed: https://prophitt.me/articles/nefarious-linkedin
> I even acknowledge the bias in drug prosecution but the solution to those problems is changing the laws, not ignoring them.

Ignoring laws is one tool for changing them.
ES2019 features you can use today
This is categorically false, unless you mean "I can point a domain name to a private IP range".
With QT5 and it's qt quick controls 2, I put together the demos of the first few chapters of "Full Stack React" within minutes. The QT creator helped me with this. I compiled to desktop (which is quicker) and then when I was done I compiled to WASM and loaded it up in the browser.

With React and other DOM based tools, it takes very long to develop even simple GUI's. There are tools like React Studio, but nothing as mature as QT. Also QML and Signal/Slots are much better than React's model IMHO. In addition, Virtual-DOM is a hack that only DOM based models suffer from and adds overhead to the development model.

I think the article is right -- Out with the new, in with the old!
Where can I ask questions of highly skilled and experienced C programmers?
I'm intermediate level C programmer trying to sharpen my skill and level up.

Sometimes I could use some expert guidance, usually in something specific to C programming.

Sometimes it's low level semantics of bits, types, casts.

Examples are:

"How do I cleanly manage error detection, processing, and recovery in this scenario?"

"I want to write code that verifies all malloc()'ed memory is correctly free()'d, is xyz a good idea?"

"I have to represent fifteen items which are mostly the same but also all different, how do I structure this program to avoid code duplication and isolate/interface the specific and general code?"

"I wrote this awesome hack... Wait... How does it smell?"

"I feel compelled to reinvent this wheel and polish it! Is there a better way?"

"Should I call this szFooBar myapiFooBar APIFoobar api_FooBar api_foo_bar, or fb?"

Stuff like that.

Thank you for advice.
Websites I visit should not be allowed to make ANY fucking requests. FULL STOP.
Both have had plenty of downtime:

https://www.ft.com/content/1fd2a066-860f-11e8-a29d-73e3d4545...

I suspect they sometimes 'fail open' (ie. allow all payments through and reconcile later) too.
Yes. I think HN stole your asterisks. You meant:

/.*=.*/ becomes /[^=]*=.*/

That is, zero or more 'not-equals-sign-characters', followed by an equals sign.

Where the first regex is 57 steps for x=xxxxxxxxxxxxxxxxxxxxxxxx, the second is just 7.

Avoid using greedy .* for backtracking regex engines! Give your greedy regex engine the hints it needs to do what it does best.
Who the hell are these juries that are allowing cops to get away with murder?

As much as people like to complain about how corrupt the police are in how they cover up for each other, cases like this are decided by juries.

EDIT: If you haven't seen the video [0], you really should before commenting. This cop had no interest in actually apprehending Daniel Shaver. If he did, he would've done a more standard procedure like telling him to lay on his stomach with his hands either forward or on his back. There was no reason to tell him to walk forward on his knees, legs cross behind him, and arms up. You try doing that. Maintaining balance is a bit difficult. Now imagine trying to do that with the police pointing a gun at you.

This cop wanted to kill someone and create a story where he was the hero. For fuck's sake, the cop had "YOU'RE FUCKED" etched into the side of his gun!

[0] https://www.youtube.com/watch?v=VBUUx0jUKxc
Not necessarily, people who are unemployed tend to get sick more often with the most common cause being substance abuse. A company with workers that are drug tested is likely to spend less money on substance abuse programs than a group of random individuals.
Thanks - I had no idea that Ubiquiti webapp existed!
How about those internal-by-spec ranges + localhost as "security popup/alert" in major browsers? Or default deny with a popup to allow?

I really struggle to see why "legitimate use" that's a minority of all use cases should forbid a consensus from cordoning off a major attack surface with an affordance for that legitimate usage.
Cuomo Urges MTA to Crack Down on Homeless People in NYC Subways
The correct method is fixing the CSRF in your insecure software in LAN, not restricting other developers.
Parent knits blanket with baby's sleep patterns from birth to first birthday
I mean, there is a lot of space between the type of boss that could care less and the type of boss that actively tries to harm.

Also, it really does depend on the firm. I've worked a lot of jobs that couldn't be arsed to know my name. I've worked a lot fewer jobs that really did care about me, but I have been there and seen them.
It is true. But then, it's an intentional bad design choice by whomever wrote the server. If your server does actions on a GET, or accepts POSTs without a CSRF token protection, that's not the fault of the browser, but a well known behaviour.

CORS will solve the javascript/ajax part, BTW.
> It hurts to work all day to pay for stuff, only to come home to half your neighbors lazing about drunk and stoned getting a free ride.

I hear this all the time - yet I don't see many people particularly keen on dropping out, and getting onto the free ride bus.

One of the problems with that free ride bus is that it doesn't go to great places. It didn't sound like you were looking forward to the prospect of living in subsidized housing for the rest of your life very much.
That sounds very difficult to maintain. Land outside cities is cheap, and the percentage of loss transmitting electricity long distances (at very high voltages) is usually overinflated in most people's minds.

Better to put them out in a big barren field, fairly low to the ground.
>...that gives me extra security

Actually, manually typing or pasting your password (assuming you aren’t using WebAuthN) opens you up to phishing attacks because you could be fooled by the URL, whereas password managers and hardware tokens will activate only for the associated domain.
How do you load an image in a browser without making a request?
NPM Tricks for Faster JavaScript Development
Also, like someone already mentioned. DNS rebinding is a thing. So the SOP can be subverted under certain circumstances (browsers will do DNS pinning to protect against this but it's not a perfect solution)
Comp Science major here, I still think these type of questions are not relevant years down the road, unless you explicitly are working with them. (eg. most database systems, log storage, and such will have to deal with such optimizations).

If you do, then it is fair to ask. But I have seen interviewers asking questions like these even for folks that would not need them . (aka, mobile development, of front end JS)

It is like asking a motorcycle racer/driver on whats the fastest way to swap four wheels in a F1 race....
Makes sense of the formula 1 driver, but not for the 500c motorcycle driver.

Unfortunately our industry is filled with lots of self-congratulating types that use interviews to inflate their own sense of self worth.
I don't see any problems here. Even though they are on the same LAN, they are still on different host, thus subjecting to CORS restrictions.

That is, as long as your devices on LAN do not send a access-control-allow-origin header, the web pages are not capable of getting the actual response. Also, the only http method available to them is GET (when preflight is not required) and OPTIONS (when preflight is required), which are methods that are almost always side-effect free and only return some value - which the script cannot even get due to CORS restrictions.
Within reason. I am no apologist for a lot of police misdeeds and dual standards, but whilst you _can_, often you won't, depending on context:

multiple high speed chases around where I live have resulted from police lighting a car up, and the driver failing to stop. Passengers in the car were "released on scene", because there was a recognition that they did not commit the failure to stop (and other associated offenses), nor could they safely extricate themselves from proximity.
Here's a straightforward example. https://stackoverflow.com/questions/2390232/why-does-canvas-...
I thought someone found a speedup for the Cairo graphics library by looking at the garbage collector.
I think a good idea would be to at least let the user confirm it.

For example display a notification:

"This website wants to interact with devices in your network, if your are at home, this includes all of your

smart things, smart phones and other devices".

I mean, we have a windows firewall and sandboxing on every level and then a webrowser suddenly acts as a vpn for every website?

That can't be good security design
> a great many things have depended on this fact to function for a very long time

Such as? Breaking "website makes a call to local (localhost or RFC1918) web server" would be a feature; any use of this is an abuse. It'd take a transition period and some careful opt-outs, but any kind of call to a local web server should require the same kind of special privileges a browser extension needs, at the very least.

It's a bug. Calling it out is the right thing to do. If you're complaining that the author should have known about it already, then you're just mocking someone for not already knowing a particular fact; that shouldn't stop them from writing up a report on it and trying to get it fixed.

EDIT: please note that I'm talking about calls from Internet origins to localhost/RFC1918 origins here, not calls from one Internet origin to another or one localhost/RFC1918 origin to another.
I didn't know this, thanks for clarifying. Further investigation for my local area:

Here's a link to the Australian wholesale spot price and peak price https://www.aemo.com.au/Electricity/National-Electricity-Mar...

Where I live, Tasmania, the average for 2019 is $147.91 / MWh and the peak is $163.

That works out to Au$0.163. I pay AU$0.26 / kWh, plus a daily supply charge of, if memory serves me correctly, $2.30 - this is to cover network operating costs.

That's actually a fairly reasonable mark up on the retails side of things.

That makes the other commenter's $0.02 / kWh seem fairly misleading. Maybe for some places some of the time.
ooh, that's awesome!
Please write it in your native language. HN trending articles can be translated articles too.[0]

Edit: I guess not, see Dang's reply below.

[0]: https://news.ycombinator.com/item?id=20402070
In that case there's no problem with fuel.
Of course they're different. But the four ideologies I mentioned can be considered violent ideologies in different realms. Allowing 3 of them but banning the other one is based in nothing more than the opinion of the censor, not in an objective principle.
To add another data point: I've lived in capitol hill for 22 years. I know zero people who have been attacked by homeless people. That's not to say that Seattle's homelessness problem isn't grave, but I suspect that there's a sampling bias in this comment thread.
> How do they not have a filter for speeds in excess of 60mph?

Pro cyclists can hit 80 mph downhill. I agree that they should do something, but whatever model Strava uses would need to be better than just filtering out anything >60mph.

https://www.cyclingweekly.com/news/racing/tour-de-france/122...
While Python has good libraries in general computing, and it has good ML libraries, it's really lacking in scientific computing (numerical linear algebra, differential equations, etc.). For example, what's a Newton-Krylov IMEX integrator in Python? Boundary value DAEs? I know of libraries for these things in Fortran, C++, and Julia... but not Python. It's also well-known that Python lacks a lot of the statistics libraries of R. When you chart it out, Python tends to just have the bare minimum of support in every area (except ML, it has good ML libraries), which if it's what you need, great! But...
Back in the days of photographic film, Kodak and Fuji were said to have lots of blind workers in their darkrooms.
In principle, you are right, but in practise, there are a few differences:

- the homeowner gets the usage of the roof space for free

- anything you can do yourself is cheaper than paid work

- the calculation is different. The grid provides electricity 24/7. Your solar provides electricity, when the sun shines. Your solar is on your roof top, so no expensive lines are needed. And so on. So, if you can use your own solar electricity well, it is extremely cheap, as a lot of costs don't apply.
Tell that to the US Navy which operates dozens of reactors in wartime vessels travelling millions of miles and enduring rough conditions and even combat with one of the best safety records of any industry.