skysight-inc/HackerNews huggingface dataset:
This bug probably existed because some developer thought "this is an internal application, I don't need to apply the same rigorous input/(edit: and output, as replies point out) sanitation as I do with normal sites because it's only accessible by VPN."

As a consultant that gets to see a lot of "internal only" applications, this is one of the misconceptions that me and my coworkers try to fight against. XSS is effective even if the attacker doesn't have access to the internal application, because it's not the attacker's computer making the requests.
Not parent. No idea about the defacto standard comment. CockroachDB client protocol is* compatible with PostgreSQL. Edit: as well as SQL syntax, that's the important bit.

Meaning you could in theory mirror data to CockroachDB and the point your clients to it instead of PostgreSQL. CockroachDB is aiming to solve horizontal scaling, hence the "grow" comment.
Having a company culture where _everyone_ feels safe enough to speak up and being heard (instead of getting kicked out) is not democracy. It is smart and crucial, in my opinion.

I am surprised that critizing something at a company equals being a trouble maker to you.
I'm made the jump, it's not better exactly, it just has a different set of problems.

For example there is no unsigned or tinyint, advisory locks in PG are much worse than those in MySQL, true and false "t", "f" instead of "1", "0", and some other things.

Yes, each item can be dealt with - but it's like I said, it's just a different set of problems.
I listen to audiobooks while taking long walks. If my mind wanders, I use the "skip back" button (in Audible you can customize the amount of time the skip-back is for). I try to make sure I catch everything because the book gets boring if you lose track of what's going on. Sometimes my mind wanders repeatedly on the same sentence and I just can't catch what was said. Then I try to repeat what they're saying to force my brain to process it, and/or take a short break.

There are two other cases where I'll lose track while walking:

When I need to pay attention to something else like crossing the street, or passing other people on the sidewalk. Just use the skip back.

I have something on my mind that I need to process. Turn off the audio and think quietly while I walk. Sometimes it's just not a good time for books, but music is what I need.

I can't just listen to an audiobook while sitting around. I'll want to do something else, right away.

Sometimes I'll also listen to an audiobook while doing mindless chores, but the book needs to be extra interesting to make up for it, otherwise it's just not worth the distraction.

If a book is really interesting (usually something that I think is going to revolutionize my life) then I'll be listening to it every moment I can.

A little off topic but, I usually get the place I was walking, and the feeling of the book wired together in my brain.
And part 2: https://idlewords.com/2015/07/confronting_new_madrid_part_2....
"Can you point out anywhere that's made all of 1..3 work successfully? I'd think that most places have 0 of the 3."

Zurich has a very centrally located incinerator (behind the "viadukt" shopping area) and I believe that they generate electricity from the plant. They also have a very granular sorting regime ... it would appear they are covering all three of the bases.
I think MySQL smells like poor engineering, and PostgreSQL like good engineering. That’s why my gut says PostgreSQL is the better choice, for the myriad issues you won’t face. It’s like Python vs PHP, in some ways.
Yeah, I’m not seeing that in the history of the page either. I didn’t do an exhaustive study, but all the versions I see say that Musk joined after Tesla’s inception.

https://en.wikipedia.org/w/index.php?title=Tesla,_Inc.&actio...
In addition to this, laws can and should be changed, if we have a discussion about whether they're fulfilling their purpose -- like in this thread -- and realize that they're not.
The Programmer Mindset – Main Debug Loop
I think we agree?

Part of what I see emerging out of this whole 10x debacle is a critique of what makes a great engineer, and a realization that it means very different things to different people. Moreover, that one person's definition of a great engineer might come with some serious limitations baked in. For example, which keys on their keyboard are likely to wear out prematurely. :-P

The same is no doubt true with product managers. For example, a previous company I worked for divided up PMs into two roles – those who were experts at the business side and decided the larger direction of a product line, and those who were able to turn those directions into unambiguous specs for designers and engineers to produce. Different skillsets, both overlapping with each other and with other positions at the company. Considering those roles separately, you could be a great PM in at least two different ways at that company, but when you start taking leadership, teamwork, and mentorship qualities into account, it's clear that there were even more pathways up the mountain than that.
It is recommended (IANAL, read this over the internet, but this seems legally sound to me) that if you are involved in an incident of self-defense, one would say, “I want to report a ____” and go on to explain the /outcome/ of events to the operator.
Such a shell would not be stable and would crash into the planet almost immediately without a huge control system to keep it in place
The 64% against includes entire blind community. Of those working at Google who replied it was majority for it.

Put another way, even though the macro blind community was against. Googlers in said group were for it. Showing googlers are more likely to be for than against
I didn't start using audiobooks until this year, but they've markedly improved my ability to fall asleep quickly. It used to take at least an hour, and now I'm usually out within 30. Except when I get to the climax :p
A Molecular Hurdle Might Make Weight Loss Even More Difficult
Protect them from what? Public shaming by people who look them up in databases? Being racist isn't illegal.

I'm inclined to think that this is less important than protecting the calls of people who had mental health emergencies and the like.
People who tend toward 1. would say that Google has bent over backwards to accomodate protesters and has acceded to their demands multiple times, e.g. canceling their project in China and dropping their contract with the US military.

Seems reasonable to me.
In the thread above CNBC got accused of a hidden agenda against Tesla, because their reporting is critical. These are the headlines for Toyota (Google with "site:cnbc.com toyota"):

* Toyota plans to recall 1 million hybrid models over wiring issue

* Toyota recalls 70,000 vehicles to replace air bag inflators - CNBC.com

* Toyota operating profit growth to drop this year on revenue slip

* Toyota is making high-performance versions of the Camry and Avalon

* Toyota struggles to save breakthrough Prius hybrid - CNBC.com

* Toyota and SoftBank are teaming up to target self-driving car services

* 2018 Toyota Land Cruiser review - CNBC.com

* Toyota recalls 2.4 million hybrids due to stalling problems - CNBC.com
There was protest involving the AI ethics council, but it was due to the inclusion of a homophobic and transphobic person on the board, not of the council itself.
disclaimer: I don't know anything about teslas.

From what I read the only way to control most of the things is through the central screen, which can be a pain compared to dedicated knobs. "Hey tesla, fire up the A/C" seems better than having to touch/look at the screen.

The games/jokes are probably not built by the same teams anyway. It's more of a PR thing.
How nihilistic, it seemed possible you would be willing to endorse and encourage greater ideals.
Yep. PG 9.5 and later supports it.

Use "EXPLAIN VERBOSE" before your query to get more info.
Spectre Mitigation Performance Impact Benchmarks on AMD Ryzen Against Intel
legality != morality, and this comment chain seems to be more focused on the moral aspects of privacy rather than the legal ones.
Genuine question that is unrelated to this but has always bothered me about Tesla.

Why does his brother, Kimbal, draw a $6million/year total comp for sitting on the board. He has zero relevant experience related to manufacturing and that salary is very high compared to the rest of the industry....this always bothered me about TSLA.
Or perhaps they’re still so supply-constrained that they haven’t run out of fanboys. Or perhaps the car is so expensive and eco-friendly than it is more valuable as a combination Veblen good and virtue signal than as a reliable source of transportation.
The official case is fine. The Raspberry Pi 4 is thermally stable. It may run a little hotter but far below the throttle limit under normal loads and no longer uses incremental thermal throttling like the Pi 3.
In a sense, every programmer is a member of a global, mostly remote, asynchronous team of every person who contributed to the hardware, software, documentation, and theoretical foundations upon which the programmer depends.
ah yes, anyone who doesn't want to be vendor locked into Cloudflare is incompetent.
What a great response and turnaround. Bug as fixed within 24 hours and paid out within a month.

I wouldn't expect any other car manufacturer to respond ever, most don't even own their software stack.
You don't have to leave to influence, being on the inside often gives you better access, knowledge and opportunity to influence change.
> On a final note, Tesla’s bug bounty program is fantastic. They provide a safe haven for researchers who are in good-faith trying to hack their cars. If you accidentally brick one, they’ll even offer support in attempting to fix it.

This is an amazingly open and refreshing policy!
Shale Investors Fear Bloodbath as Earnings Season Kicks Off
Got to say Pimoroni's Fan Shim [1] works well. It is easy to set up, and they have a python library with a systemd service that can auto start and stop the fan depending on the CPU temperature. While you can get away without cooling, the CPU will be throttled to pieces.

[1] https://shop.pimoroni.com/products/fan-shim
The whole cartoon about "martini - gin + whiskey" cartoon isn't great, as "cocktail" really is the best answer it could give. (A manhattan would also have to switch from dry vermouth to sweet vermouth, and change the garnish from an olive or lemon peel to a cherry, and traditionally it would not use just any whiskey, but use rye specifically.)
Live: Senate addresses Facebook's Libra cryptocurrency and data privacy
I found moving it around in buildings (HP Velotechnik Speedmachine) quite a lot more cumbersome than my regular trekking bicycle. Fitting it through doors/elevators (especially with panniers) but I guess that is what you are eluding to, wheeling it upright and all that.

Did you ever bring it on a train in the UK?
Something changed. Defense contracting is certainly something that many might characterize as "be evil".
Like It or Not Twitter Redesign
Most bus and light rail systems use something like this, don't they? Kind of impractical otherwise.
Drill depends on Calcite for SQL parsing and cost-based query optimization!
3D kinematics using dual quaternions: applications in neuroscience (2013)
Exactly. The food banks should be able to focus on the high touch unique needs of their community, not trying to replicate the same backend process.
Oh interesting! TIL, thanks!
I think that's actually what he did, from what I got in another article, and the financial advisors he hired actually did stock picking and cost him more money than they made for him.
> Circling at 2,000 feet (600m), the relay helo takes camera feeds and sends them to a fixed-wing aircraft flying higher at 10,000 to 25,000 feet (3,000-7,600m), depending on weather. The airplane sends the combined feeds back down to two receive trucks located along the race course.

This was the most interesting part. It makes sense you’d have to use a plane at such long distances as you need a perfect feed.

I’m curious what other sports have a plane following them.
> A person's heart stops, you call 911, the try CPR and they die anyway (well, they're already "dead" if you're doing CPR). You shouldn't have any liability.

There's already some kind of provision for this in many places; it's known as a "Good Samaritan law".

https://en.wikipedia.org/wiki/Good_Samaritan_law
Assuming the sale price of the game in the OP's example was $10, distribution still cost less than 3%, and paypal goes up very slightly because of the $0.30 base charge, but the main fee is percentage based so it doesn't change. So even for a $10 game we're looking at less than 9% in total.

This example is also using s3 retail pricing and paypal retail pricing, which already factors in profits for Amazon and Paypal.

None of the big marketplace's costs are anywhere near 30%.
When your/Tesla/supporters response is basically "... the shorts!" as the main and salient point of the rebuttal rather than "wrong, and here's why...", it's equally hard to assume your objectivity, too.
This is bad advice. An ORM is a useful tool for smoothing over the generation of queries and their conversion into object graphs, and make sense for many use cases.

It is true that using them effectively still requires knowing the underlying database technology, but that is a given - they are not meant to supplant that knowledge.

I will say though that every time I have encountered a codebase developed by a fanatically anti-ORM developer, it has contained a bug-riddled implementation of a half of an application-specific ORM anyway…
Facebook Called `Delusional' over Crypto Plan as Senate Digs In
> So use your credits before you cancel?

So what do you do if you're nearing the end of your subscription period, and there aren't any new books you want at the moment? You're forced to subscribe for an additional month.

> Also why do you need to buy more credits? You can buy audio books directly for $ once you exhausted the credits. I use credits for audio books that cost more than the price of a credit and $ for audio books that cost less.

So what do you do if you've already used this month's credit, and you want to buy a second book which is much more expensive to buy in dollars?

---

I have run into both of these scenarios with Audible. Neither of them are the reason I don't use Audible—that would be the DRM—but I do find their policies frustrating. Downpour and Libro.fm make it significantly easier to buy what I want when I want it.
He wrote that as pressure increased due to terraforming projects, the tents needed more support.
Listing all IoT (Internet of Things) security solutions. 25 and counting
Are you trying to make a fine distinction between "working conditions" and "work"? You just said that this panel that she was protesting the composition of would look at what the company was doing and plans for what the company wished to do, and have input into the ethics of developing and deploying them (and I'm assuming changing them or ending them, otherwise this panel's only job was to kiss paper.)

The employees of google would then be expected to produce and maintain these projects. That's their work. At the least, they're expected to share a roof with these projects, and profits from the work they do could be spent on these other projects, or vice-versa.
No, this would be [insult to the NSA] at the idea of packet injection by controlling all the major backbones, and endorsing unauthenticated protocols.

The DoD’s faith in PKI is so great that many public facing DoD websites are signed by the DoD root CA.
In VSCode, while debugging, I rest my fingers on F10/F11, for Step, Step Into, Step Out, Continue. Does that work with a Touch Bar mac?
Police have massive short term gains from going against the rules. It makes their jobs easier (short term), safer (short term), more apparently successful (short term). Plus plenty of law enforcement exclusive privileges ready for abuse. Taken together this creates a massive demand for oversight and accountability, and big incentives to undermine those.

None of this exists in the field of EMTs. When they "hide behind data protection", it would be to protect against frivolous litigation after honest mistakes, which I find not only understandable but also preferable. If I ever need one of them, I'll surely want them to give their best medically rather than spending cycles on court-proofing their process.
That'll mostly depend on if it still gracefully handles JS being disabled. But I hear ya.
There's not much fare inspection on MUNI. You need to actually have a credible chance of meeting an inspector to discourage fare evasion (i.e. P(caught) * Fine > Fare).

BART has faregates, so it's using the system that is argued against in the article. The proposal from the OP would be to remove the gates and significantly increase the cadence of fare inspections.
The same arguments apply to making my doctor visits public. At least if I go to a government employed or financed doctor.
Does this mean you can legally mod your car under the guise of hacking it?
Hah, yeah I was going to post about Bugno too. It was cool to see him flying during the Giro - they'd always give a bit more of a shout out to him than the regular chopper pilots got.
How often are you reaching the 80C throttle limit? Have you installed the latest firmware update? It should keep the temps from hitting the ceiling, depending on usage.

Update information:
https://www.retrorgb.com/raspberry-pi-4-firmware-update.html
> E-Scooters will eradicate bicycles for most uses in the next 10 years or so.

That seems completely non-obvious to me. For starters, will Bird et al even continue to exist for 10 years? And even if they do, why would they replace un-electrified bicycles, which have a number of advantages?
Yeah 3D / force touch is a "miss" that I strongly feel should have been a "hit," as it's a pretty innovative idea - mostly from the hardware side - but was either difficult to discovery for users and/or apps didn't have good examples.
Why We Changed YugaByte DB Licensing to 100% Open Source
> My manager started ignoring me, my work was given to other people, and I was told to go on medical leave, even though I’m not sick.

I'm sure there is another side to this story. Nobody has an infinite amount of time or effort. If you're spending your time organizing protests rather than doing the job you're actually paid to do, you shouldn't be surprised that your coworkers and manager would be upset that they have to pick up the slack and try to replace you.
Sorry, Older Programmers – What's on Your Mind Today?
Today, I woke up sympathizing with older people for their contribution in science while people like me take for granted the hours of sweat, blood, and divorces it took to lay the foundation for the 21st Century. You risked so much for millennial. You are my heroes regardless of the accolades you received or didn't because you participated in transforming the world.

Sorry, older programmers, what's on your mind today? I want to listen to you talk about life such as thoughts on the industry, pet peeves, or your ex-girlfriend Summer.
I'm a huge PG fan but switching your database on an existing project is a non-small undertaking.

If you're starting from scratch, then yes, you take PG every time. There's a lot...a lot that goes into saying that and if you haven't made the jump, a lot of the reasons aren't going to seem important because you currently "don't do" the things that PG lets you do with your data.

Like this: https://www.brightball.com/articles/why-should-you-learn-pos...

So the surface level stuff that you're experiencing with your database is going to be MySQL relative.

Probably the one that connects the most with the people who are working with MySQL is that you no longer have to worry about TEXT, MEDIUMTEXT, LONGTEXT.

Without really thinking about it, most people and ORM's just use TEXT and every now and then you'll get some data to put into the field that doesn't fit...and it won't generate an error it will just truncate the data. You'll end up needing to go and increase the field size wherever the problem happens (and then hope it doesn't happen again).

With PostgreSQL it's just TEXT. Done. Doesn't matter how big or small it is, it will fit the whole document. If the data is larger than 8kb, it will be transparently compressed with TOAST.

I've tested by dropping in a 2mb XML document and it stored as 80kb.

That's just a tiny piece though.
Yet another review without benchmarks comparing the The raspberry pi 4 to other SBC's on the market.

Comparing a product to its previous generation provides some information but does next to nothing to inform how product stands within the rest of the market.
It's always important to know about authors' conflicts of interest. However, in this case the results align with a lot of others related to vitamin D's effects on cancer and the immune system in general. (I believe it's possible for the raw number of studies supporting a position to also be a misleading figure, but in this case I don't sense that's what's going on.)

Fun fact, vitamin D was a treatment for tuberculosis before antibiotics. https://www.ncbi.nlm.nih.gov/pubmed/29804293
I don’t see anything in there about tents, though.
"To outfit a wagon to go West with all the supplies necessary cost the inflation adjusted equivalent of about $100K. Wagons, livestock, supplies to live on while travelling and when homesteading before the first harvest came in were not cheap. That’s without considering the materiel you’d need to set up a farm when you got to your homestead."

This may be true, generally, but it was not true of the Ingalls family that your grandparent refers to. Their travel and settlement plans were not the most well thought out ...
How does the price of the factory matter? It does not make the floor (couch or whatever he slept on) any more comfortable.
It's not illegal to have a NO2 factory in your garage, it's illegal to drive it on the roads. A good-faith emissions control hacking would probably not involve long-distance highway driving or racing.
Maybe if you only drive in a private property and not public roads. Probably like aftermarket modifications currently.
You could look into building muscle mass. I would avoid eating junk food and drinking beer until you get a belly, for instance.

A bit of both would probably be okay, though.
Now we just need to wait for it to make your computer freeze over. Ba dum tss!
s/not allowed to marry/not allowed to not marry/
A one time $10 off of a $50 purchase by the beginning of August and through that application should be such a low price point we laugh at it.
In iOS 13 you can just drag the cursor around with no special technique or gesture. It also effectively removes the peek and pop paradigm and replaces it with context menus which work on all devices. It seems pretty clear that they’re setting up to remove 3D Touch.

https://developer.apple.com/design/human-interface-guideline...
Texas cities are doing good in spite of the state's political culture, not because of it. All the cities except maybe DFW are in a constant struggle with the conservative state government.
At some point we will need to say "who cares". You can't possibly prove the non-existence of life on Mars. So at some point you need to stop looking and get on with things. When is that point? I dont know. My opinion is we should get humans there to have a look and then move forward - assuming they find nothing.
I guess “the car slamming itself into highway barriers” is the bar for safety nowadays.
My experience is that the Pi 4 gets very hot. You touch it anywhere (USB port, Ethernet port) and it hurts.

I got a 40mm 5V Noctua fan for it and 3D printed a case that takes it. The thing now runs very cold. Idle CPU temperatures were about 60 degrees before, now loaded temperatures are around 40. Airflow is a big deal. (I am not using any heat sinks.)
Do distributed teams need new tools?
What are the others? Android and ChromeOS are both built on the Linux kernel.