skysight-inc/HackerNews huggingface dataset:
Unlike ActiveMQ, RabbitMQ doesn't automatically send undelivered messages to a default DLQ. So that doesn't apply in this use case.

The ActiveMQ header to schedule messages looks promising. Thanks for sharing, will check it out. :)
can still select "latest Tweets first" but then the app literally undoes your preference every week or two, forcing you back to their "Home" view. It's offensive.

Never forget: you are the product. On whatever is the ad industry equivalent of HN, there is probably someone gloating about how much they love that it does that.

I wonder also if it’s cheaper. Computationally I mean. You don’t need to worry about consistency if you don’t care about ordering. You can also just show the same few popular tweets to everyone without needing to compute an individual timeline for each person.
It’s all Latin for we know something you don’t
Zebrafish used to help save a dying boy
Microsoft did get the OEMs, true, I stand corrected. But Windows needed backward compatibility to DOS applications, otherwise Windows would have failed, as there was such a huge installed base of existing DOS business applications
Good. Whilst the XSS auditor was able to protect against quite a wide range of payloads for reflected vulns, I think it caused more harm than good. Quite often I'd have to try and argue that an issue was real because the PoC didn't work in Chrome. Often I was able to find a way you could cause the server to modify the payload such that the browser was unable to match up the input and output, and then the payload would execute - but I think the legacy of this feature is that it has caused developers to take rXSS much less seriously.
Exactly. That said, because the API itself is typed, it is possible to have the runtime enforcement also verified when statically type-checking your application code (e.g. that innerHTML is passed a TrustedHTML value, and not a string) in Flow, TypeScript or type-aware linters - like this: https://youtu.be/1KQngEZ8qH4?t=1330
How the Right Diet and Foods Help Reduce Stress at Work
Incident Management Tools for SRE and DevOps
It is, but we need to stop using fossil fuels in the next twenty years. Homes usually last longer than that and retrofitting heat pumps is quite expensive.
By definition, no.
https://opensource.org/osd-annotated #6
I wonder if you can still order the soundtrack on cassette for $8.99 at Call J &R Music World at 1 800 221 8180
His point is that Google isn't a monopoly from the user side. What if Google started offering the ability for websites to pay to increase their pagerank?
At this time it is only available for Chrome, but the project is open to contributions https://github.com/dvdvdmt/popup-tab-switcher
Honestly, for that amount of money I'd renounce my citizenship and move to another country then sell it there.

Stupid law.
Would the firewall allow your package if you do not use Kazakh certificate as root certificate?
I have hit a paywall, can someone add the list of extensions of here as a comment?
No problem, and great extension! :)
Honest question, how bad is natural gas actually carbon wise?

I remember it being touted maybe 15 years ago about how great it was compared to gasoline and being a renewable resource. If I recall some national parks vehicles and bus lines [1] were moving to it.

[1] https://www.nrel.gov/docs/fy00osti/28377.pdf
The pain is in the form of a far higher monthly bill.

In the UK, gas is ~ £0.03 per kWh whereas electricity is ~ £0.13 kWh.
You don’t just “plug in” the type of electric heater that can heat a large space such as an entire home. It’s wildly inefficient and there are safety concerns with constantly plugged in space heaters.
Marshal Blücher was an impressive figure. At the time of Waterloo he was 72 years old, right at the beginning of the encounter he instantly launched a cavalry attack on Napoleon which he led himself in the front!

Think of the average 72 year old today.

He got injured and pushed back, only to later save Wellington from defeat. Wellington later called Waterloo the "the nearest run thing you ever saw in your life."
What do you mean? The inheritance itself is already a gift, it just happens to be a gift from a dead person who might or might not be related to the recipient.

I'm not just being poetic, they are actually connected in the tax code. Untaxed inheritance and untaxed gifts come from a similar lifetime limit, after which they are taxed.
Ask HN: What are programmers favorite sites?
I am looking for sites where you go for solutions.
Two problems:

- main fuse would blow up

- your head would blow up from electricity bill
Apple gives up ’tax’ on Chinese medical apps after outcry
Shipping container offices are all the rage these days. Have you considered using them? I mean, if they're ok to work out of - legally and safely - then why not live in one? It would certainly cut down on the construction costs.
Heat pumps are a disaster when temperatures drop below 20 degrees F. We end up using auxiliary heat which is extremely inefficient and expensive.
Anecdotally the people I know who grew up in cities have less psychiatric problems then people I knew who grew up in suburbs. They also don’t seem more cynical, just more competent.

Do you have any evidence? Or just a personal hunch?

> big cities are so dangerous nowadays

Big cities nowadays are dramatically safer than they were a few decades ago.

> parents no longer allow their children to play outside unsupervised

This is due to the parents’ paranoid fears, not the inherent danger involved.
> Trusted Types are an opt-in browser API that helps developers prevent DOM-based (~client-side) XSS by mandating that developer-specified rules are applied to data that reaches risky functions (like eval or innerHTML). We're working on having it available as a proper W3C spec. More info at https://bit.ly/trusted-types or https://youtu.be/1KQngEZ8qH4*

Can you expand a little on what Trusted Types gives you if you already have a strict CSP which prevents unsafe-eval/ unsafe-inline and e.g. has a 'self' base-uri set?

I'm assuming it would prevent you injecting other HTML if a DOM-based vulnerability existed.
If you're already using Emacs, this use case seems like it could be handled with org-mode and a custom export implementation.
I prefer having gas as redundancy for when electricity is unavailable. Especially in places it gets really cold, you can live without light, but not without heat and having a gas boiler and stove is a lifesaver.
More generally, always consider: what is the maker's motive?

Is it to make the best tool for conversation, or is it to make money? If it's both, how important is each?
The reality of the situation is that you can't remove the human factor from security. So someone copying your email to someone else is a human problem that can't be fixed - someone could just as easily photograph the screen.

The reality is email will continue to be used, and there is a use case for being able to send an email securely to another person.

EFail was pretty bad, but only affected HTML email.

Having a modicum of backwards compatibility is how to encourage transitioning to new tech, so the RSA implementation makes sense.

I must say this is the first decent alternative I've seen for GPG instead of rants about Signal and specialised tooling that just ignore the issue that folks want to be able to send secure emails to each other.
Messages are encrypted with a session key in openpgp so this doesn't work.
Good to see you here, am well thank you and I hope likewise!

To your point, that's just the tradition I was told by the stonemason who built the walls I helped on.

There's a subtle art to pre-examining the stones before picking, it wasn't a case of if you touched it, it had to be picked up. It was more if you committed to this stone then make it work in this spot or another. There's always a place :-)
Nice write-up! It's a shame that your report wasn't handled with the usual prompt response & fix.
Thanks for your advices! I will surely read your source code. It is my first time when I create an extension and I think it would be great to make it crossbrowser.
Spin up a VM on each cloud (and in house) and run a stack on that which software glues it together. Redundancy of sorts

The thing is that using a cloud as a glorified hypervisor for home-baked VMs doesn’t work economically. Colo or even running a DC is cheaper. Cloud generally only makes financial sense if you are using the managed services. And of course the instant you do that you sacrifice portability to a greater or lesser extent. This is of course deliberate on the part of the cloud providers.

It makes sense to pick 2 clouds and go all-in on them using their native and managed services to the maximum. You will need to maintain two parallel skillsets to do this. Completely forget about any layer that promises to abstract it, they are all red herrings if not outright snake oil. Whether that’s IBM consultants, or Terraform.
An existing democracy which had a much much bleaker history than South Korea (heck, even North Korea) merely 80 years ago...
> A better headline may be "Google Chrome replacing XSS Auditor with Trusted Types"

As I think a Googler has mentioned above, the XSS auditor is for reflected XSS vulns (caused by the server unsafely outputting user input). Trusted Types protects against DOM-based vulns, which are more client-side.
What situation are you in where security vulnerabilities in the Docker image are important to fix, but updating from End-of-Life support for the language isn't?
(Or even where security of an old Docker image is important, but "has 0 tests" isn't a concern?).

That being said, using a newer underlying Linux image for a Docker image is as copying the Dockerfile and building it, isn't it?
I don't think super sound argumentation is really the solution to everything. There is this documentary Fog of War about the Vietnam War and one lesson there is that rationality alone won't save us. On the contrary it might have almost provoked nuclear war. ;)

About the side note, what forms of evidence do you think are stronger?
Lets say you have this root CA installed on local machine and won't delete it. Can you protect yourself against https decryption by MITM in any way? Will VPN help or they will intercept VPN connection too?
> That looks really ugly IMHO, compared to JSX which is more HTML-like.

The point of this is not of asthetics, (IMO it’s not that ugly :-)) but more that it just consists of common data structures that is easy to manipulate. If you’re a React person, think of directly writing JSON instead of using indirect React.createElement calls.
Writing components in JSON would be impractical; (actually it might not be - I think I’ve seen blogposts using React without JSX) but writing components in cljs data structures are practical and less tooling is needed!
In such case the right thing to do would be to default on the IRS debt and let the IRS reposes the artwork. Then report a crime and watch the ensuing flames between US government departments.
> But there are very few of them

On the contrary, I think, there are quite a few of them still. Just look at people who created Python, Emacs, Vi, Sublime Text, Charles Proxy, Nginx, Apache Httpd. And this is just scraping the surface of the useful software in the OSS.

May be percentage wise, they are less. But even a .1% of millions, still makes it in the 1000s. And lot of others who perhaps have the potential, but sadly never realize it.
Aren't some US providers (Comcast, Verizon?) injecting nasty tracking/advertising into HTTP pages?

That's extremely worrying as well and it appears politics so far are unwilling to make it illegal. There needs to be more protest and more competition so consumers can vote with their wallets.
While at the start it was just a synching folder, nowadays dropbox’s value proposition is:

- having a client in any mildly popular operating systems.

- having a fast and simple file sharing mechanism with co-workers/clients

- having high quality native apps, in particular on iOS, to the point that until Files came around Dropbox could be seen a make do file manager to switch files between application even locally.

Anything that doesn’t have full native iOS and android support is providing a different service. Let’s just call it another “desktop file synching” service and not a Dropbox replacement.
1984 101
It really isn't very expensive. Installation is mostly connecting the inside unit with the outside unit through an 8-10mm pipe (1/3"). The work is about 2-3 hours and material costs are pretty insignificant. The HX units are pretty costly, though. About $2K for a decent one.

Where I live, Norway, a lot of houses have gotten these retrofitted.
Well, the age of in-browser reflected xss filters is simply over.

This was a flawed idea for multiple reasons, and they are thankfully now gone from Chrome and Edge (https://portswigger.net/daily-swig/xss-protection-disappears...). I guess from modern browsers only Safari still has one. There are modern XSS defenses you can use, XSS filters just did not stand well the test of time.

I would state that it is good if your XSS works in Chrome, just like it works in Firefox. That XSS should be fixed by the website, instead of that website owners neglecting the fix and assuming they're protected because the alert doesn't fire in Chrome. Especially given that if the attacker spends a bit of time tailoring the payload, they may bypass the auditor.
It reminds me of the movie about McDondals start. Not the same mechanism but similiar modus operandi.

It seemed even more ingenious/mischeviois, because in exchange for franchise deal they leased land to franchisers, not even the parent company. So they didn't milk their company.

Im not sure if thats the whole of mcd corporation income structure, but the movie hinged on this one.

Hope I didnt spoil too much, there's more to the picture anyways.
Do pro/con trees actually work in real life? I played with something like this when using Kialo for a while, and my impression was that this technique doesn't help much. Shoehorning everything into a pro or con is one thing, duplication of points in many places in a tree is another.

I abandoned Kialo with a conclusion that pro/con trees don't map well to reality; we need graphs of facts and their relationships.

(Also, my gut feeling is that when you're talking about "arguments" instead of "facts", "evidence" and probabilities, you're in business of convincing, not truth seeking).

But that's not to diss this project. As an implementation of pro/con trees it's excellent, and I'd prefer typing in this language a millon times more than clicking around Kialo.
I think you two are not talking about the exact same thing. In my understanding GP isn't at all opposed at kids being kids. Their point sounded more like being about autonomy.

Due to the mobility restrictions of the suburbs (everything can only reached by car) you as a parent are automatically managing more of the time of your kids: Picking them up at school, driving them to organized event 1 or 2 (sports for example) etc.

In the city it's easier for kids to do those things themselves: My kids went to school by themselves after a few weeks in first grade (school is only a few hundred meters away from home, though). This has a bunch of other consequences: They can autonomously meet peers earlier, so they have more free and unstructured time together etc. All in all less parental involvement, and the kids have to (and want to!) organize more by themselves.
Can't upvote this enough. People seem to think having an electric or induction hob is somehow superior to gas.

Nah. Gas is by far the best thing to cook on.
I don't live in a big city or an urban area. I live in a small midwestern town, population 10,000. I paid $40,000 for my 4-bedroom house. I don't have a mortgage. I have TWO gigabit optical Internet connections for which I pay less than $70 per month - since the 1990's! I work remotely only occasionally visiting the fancy places you all speak of, wondering why you put up with what you put up with. I employ several programmers, including very talented folks from Russia and Colombia. I have taught open source full stack development for a few years now, with graduates getting positions at the top silicon valley firms. You'd be amazed how many start-ups have succeeded from towns like this. I only recently put a lock on my house - not because I did not feel safe - more an IoT thing. I have raised 5 kids here. My town has a village square, and yes a Walmart. My town has more than 30 miles of bike/hiking/skiing trails. Parks everywhere. There is a sportsplex less than 1,000 steps from my house with 3 full size basketball courts, indoor pool, outdoor pool, hot tub, 200m indoor track, comprehensive weight/exercise/fitness facilities, etc. Less than 1,000 steps in another direction is a modern library with a great kids section. This is not an unusual town. There are many like it in America. Do they have problems? Sure. They are the places that teenagers used to grow up to move away from. Those kids are coming back now and having families of their own, with "actual births".
It may amaze you to learn the world is not a binary between "legalize krokodil" and "ban sugary drinks".
Java's GC does it. When a reference becomes unreachable, it will automatically free the resource. That's not the issue. The issue is that GCs are not predictable. All current implementations either have issues with circular references, or they run infrequently and may even need several runs to clean up complex structures.
So it may take a while until an unused resource becomes available again, and you don't know when.
Well, frankly one does. A heater on some of the walls has been enough for our family home in Norway for decades. Not sure how it's "wildly inefficient". Could always install a heat pump if so.

And if it were true that one cannot just plug in some heaters, one would then have to integrate something better into one's home... how is that still more pain than having to exactly that for the gas to work? Not sure about the safety concerns are anything compared to burning gas, either.
Agreed. I read the front page and concluded it was a way to write nested lists with colored +'s and -'s.
Use a browser that doesn't use the CA list of the OS (such as Firefox) and tunnel all the traffic via a stealthy VPN.

It would probably be illegal and if the regime finds out they'll put you into jail etc.
Oh that's interesting. What I've heard is that changing the heating system from radiators that use water heated by gas (as is common in German gas heating systems) to a heat pump is difficult because heat pumps don't give you such high temperatures. So you'd need a lot more surface area to heat adequately with the lower temperatures provided by your heat pump, i.e. you'd need to switch to underfloor heating, which means ripping open all your floors. Glad to hear that there are apparently simpler ways. We need to switch almost all buildings over to heat pumps over the next two or three decades after all.
Which you'd not be if you were just starting out. The cost also won't come down 90% no matter who you are. Big streaming networks often have to build their own to compete.
Do your own due diligence and ignore this. Either a scam for money or identity theft.
This is an identical article taken from The Guardian.

The Guardian piece was also submitted a few days ago around here:
https://news.ycombinator.com/item?id=20409450
You cook the whole planet as a side effect though.
Then the money earned leasing it out would be taxable, but you still can't sell it so there's still an issue with taxing its value
It releases about 15% less CO2 than gasoline, so it's a bit better. It does produce fewer particulates and combusts more completely, so there are fewer other byproducts such as CO and NOx.
You could probably get butane gas cylinders, no? If you only use them for cooking, even a smallish 13kg cylinder lasts a long time.
Thread from 2015: https://news.ycombinator.com/item?id=10490198

Also 2015: https://news.ycombinator.com/item?id=9544256

2014: https://news.ycombinator.com/item?id=7637635

Oliver Sacks pilfered the title, or someone did on his behalf: https://news.ycombinator.com/item?id=19124608
How often does that happen in Berkeley?
You do realize that proving non-existence is rather ... difficult?
Hence GP's counterfactual, "if this piece were the only thing you inherited and you were broke".
Depends on the number of kids and what they do. Playing drums in the same room as someone trying to focus on a high-adrenaline multiplayer FPS would never work (at least not very well). Separating into multiple rooms also allows kids to bring friends over and do stuff without disturbing the other kids. Also; kids needs time to be alone, multiple rooms allows them to do stuff by themselves without having be with others.
> It would be like the police turning up to your house and demanding you have a receipt for every item in your house. Any item you do not have a receipt for is assumed to be stolen and you have to pay for it. The burden of proof is placed on you to prove you did not steal it. Normally the burden of proof is on the police to prove you have stolen, suddenly it has been turned upside down.

So, under what legal authority can Oracle or Microsoft or Red Hat or IBM _force_ you to submit to an audit?
At the very least it is weird that the article says nothing about sexual selection, it is the go to hypothesis (that of course subsequently requires proof) for weirdness. Like a peacock's super unhandy tail. Or the building of blue nests and performing weird dances in them by certain birds. If evolution lead to apparent wasting of energy, it is almost certainly sex related.

But I guess it is a mystery of evolution to a dentist. Maybe said dentist (Martin Nweeia) should talk to an evolutionary biologist before appearing in blogs.

It's also not like the Narwhal somehow decided to not have teeth, I guess if you swallow fish whole and everything is fine, a Narwhal without teeth has more energy left and less tooth related problems and thus better survival.
The ones in power will always find ways to not be subjected to the same rules as everyone else. Proof: see human history for the last ~2000 years.
Just think about this for a minute.

The regime has just painted a huge "X" on their backs.

If you hack the governments servers and steal the certificate private key you can pretty much rob the entire country - all bank transactions, pins, passwords etc. will be in the clear for you, ripe for the picking.

This is yet another reason why backdoors are so dangerous, not just for the privacy of all citizens.
isn't that ... too soon? the main reason i use PHP is because there is no time to rewrite stuff.
Sure all these problems are important to address. But often there is a lack of time/interest to do it.

I think the PHP project should simply delete the 5.6 image, since it is insecure and EOL'ed. Then if somebody is interested they can provide an alternative image somewhere...
> Product-wise & economically, it's already lost.

Not remotely. Induction is swell, but gas is an affordable luxury.

> Electric water heaters are cheaper/better to operate.

In what world? Gas is orders of magnitude more affordable than electricity for water heaters [0]. If your power goes out, then you still have hot water, can cook on the stove, etc.

> I don't know about a commercial building, but for a home, you'd probably save $10K+ in piping, installation, and connection fees.

Depending on where you live, you could potentially recoup that in a year.

Induction stoves are also 2-8x more expensive than gas or electric counterparts. If you're a landlord, it can be a considerable expense to replace appliances.

[0] https://www.energy.gov/eere/femp/energy-cost-calculator-elec...
Are there jobs in that town? That seems to make or break a small town.