skysight-inc/HackerNews huggingface dataset:
So many home-routers are run with horrid CGI-scripts on the back-end - I'd not be amazed to learn that submitting a form-field with `blah` in it would try to run the command blah (probably via busybox).

If you have time/patience it might be worth exploring.
Could someone devise a SQL injection attack using a custom-made license plate? I'm imagining someone printing up

x'; DROP TABLE drivers; --

on a plate, and driving up and down the highway past automated license-plate readers.
If a message displayed by the first-party software is an intentional message that obfuscates the true status of the device for the benefit of the manufacturer, is this not fraud?
I agree with this. I'm struggling to get out of my current role/job right now, because I want to move away from PHP (I'm really growing to dislike it as a whole, and in my personal experience have some very negative connotations around the development practices of the PHP developers I deal with on a day in day out basis)

I been looking at C#, what did you find was easy to translate to quickly?
That's not what's happening at all please reread.

> Apparently, when they didn't have the right data for a vehicle, a privately operated citation processing center used the word NULL in the license plate field for many tickets. Since that just happens to be Droogie's license plate, he got all of them.

So it's 'confusing' the string NULL used incorrectly (kind of, it's fine under the assumption that no one will have the license plate NULL but that assumption is wrong) with the string NULL.
pretty sure that is a valid vi command
> If you want a track car (or a Porsche), you'll buy the Taycan.

If you want a track car, you will not choose a 4400lb, full size, electric vehicle.
This story reveals an underlying problem, DC charges are still too slow compared to gas stations. You can fill a gas car en less than 5 minutes, compare to Level 3 charges that still requires an hour. This causes a severe convenience problem for electric cars. if you are running out of gas and still need to use the car, you can quickly solve the problem at a gas station; with electric cars what if you still need the car? (You had a pretty busy day), you are no good for more than 6 hours while the car charges.

Certainly, it will be a good business opportunity for the company who figures out how to take charge time to gas station levels.

In Condominiums, metered charges could be installed in each appartment parking lot. For those who don't have a garage or parking lots, small public charging stations could be used, although the charging time problem would need to be solved.
Recharging after the same intervals isn't enough. How long does it take to charge? Do I have to spend an hour standing around at the "pump" each week, whereas a gas pump takes two minutes?
I buy the "use the restroom, buy the supplies, eat" argument for long road-trips, where it's probably a good idea to stop for 30 min to relax. But not for the fill-up during your commute to/from work when you can't charge at home.
I use it too much, but it's true. The world gets better when people put effort into it, not just because time passes, and its important to remind others that complaining is cheap but doesn't pay dividends like fixing problems. Along with the idea “A society grows great when old men [people] plant trees in whose shade they know they shall never sit”. Learn to enjoy planting the proverbial trees, the future will be thankful; and to be frank, we owe the future better than today. It is on loan to us, and we should act accordingly.
They could have just added it as a flag to plugins, showing a clear security warning, potentially requiring a review.
Samsung hardware is still top-tier though. For the poweruser, an attractive option is a Samsung device rooted to remove all bloatware, and sometimes even flashed with the AOSP Android ISO (instead of the carrier-specific, pre-loaded operating system)
Missed a section, yes they did say further research will look at using stereo vision
"hand-enter a NULL for these cases" <-- should be a reserved word then.
Actually, it was brilliant because it pointed out how flawed the system is, that it can be passively broken or circumvented. This could be used to invalidate all citations that were issued from agencies using that software.
The problem with this approach is that you're still in violation of the letter of the law which means it's up to the cops to decide if they will pursue or not which means now they can pursue you for your skin color, accent, etc and use the letter of the law as an excuse.
it's pretty easy to detect only when you are being piped and then only include malicious code then
Well, it's 1.0.0b1 which is still good news considering how long it was in alphas.
It must be a car manufactured before VIN standardization in 1981, at the very least.
Without the protests, when and how are the residents of Hong Kong going to be allowed to vote for democracy?
Are Only Type Parameters Generic Enough for Go 2 Generics?
I think you're assuming a position I'm not making. I'm merely saying "it's too difficult" is a terrible excuse in this context.

Also, I have nothing against AirBnB to meet and talk to locals genuinely hosting you in their homes. I have everything against converting residential housing such as apartments to commercial housing (eg. landlords buying multiple condos exclusively to make them AirBnBs)
I actually asked if they could drop a bunch of bowling balls from planes... like WW2 planes that dropped cannon balls instead of bombs. I was told those types solutions aren’t possible because one explosion could set off several others which then interferes with their carefully plotted (but evidently not particularly useful) map of where the mines are thought to be located.

Supposedly the only way to know with 100% certainty that an area is free of land mines is to remove them individually without detonating them. I guess I understand the logic but I also can’t help but think there has to be a better way that’s both cheaper and doesn’t involve humans risking their lives.

Perhaps one day.
Ah little Bobby drivers ...
Number of years ago I was frustrated because they never sent me my renewed card and it turned out they never updated my address even though I did the paperwork. Took it to twitter and tagged @CA_DMV and they responded pretty quickly and took care of it. Got my new card pretty much next day.
Seems the US is at a severe disadvantage here with 110V.

Also, surely people can charge at work? 8 hours at work should cover a fair bit of the population
More interestingly, the github repo is just a wonderful example of a fully built application using modern techniques in a microservices architecture: https://github.com/DMarby/picsum-photos

It's so hard to always find how all the pieces fit together and this repo has it all. Really impressive.
You obviously still don’t know what the phrase “choosing to die on a hill” means.
Are you leaving them a little runny? That's basically the trick to any egg. They'll continue cooking after you take them off the heat, and in the end won't be dry and tasteless.
it's not about how much infra costs here - that's a straw man in your comment - it's about economic factors shifting behavior.

stuff like this becomes a part of rational short term behavior for corps with low taxes, cheap debt, etc. why get 2% ROI on R&D when you can get 3% elsewhere?

we know some solutions: higher taxes, nonfree debt. there just isn't political will to do it atm, for numerous reasons.
Shipping it would be somewhere between $500 and $1500 depending on your distance. Alternatively, you can rent a one-way U-Haul (or similar) with car towing and tow it :). The fuel alone though at say 15 mpg while towing is probably about $250 though.
1. While stereo depth estimation would work in theory, none of the self-driving cars actually have camera configurations that allow for stereo depth estimation (see here: https://electrek.co/wp-content/uploads/sites/3/2016/10/tesla...)

2. Stereo depth estimation is quite unreliable in practice because it requires you to match up pixels between the two images very precisely (1-2px difference can be a large disparity in distance), so it is not reliably used.
The sentence you quoted would make more sense if you interpret "is really just" like a mathematician, i.e. they're 'equivalent' in the sense that you can 'map' everything important about either in both directions.

More concretely, "an optional" is something that either 'has a value' or 'does NOT have a value'. So it "is really just a list constrained to size 0 or 1" in the sense that an optional that 'does NOT have a value' is equivalent to a list of size 0, i.e. a list with no contents/members, and an optional that DOES 'have a value' is equivalent to a list of size 1, i.e. it's 'value' is the single/unique member of the list.

Think of statements like 'is really just' in the sense that an integer between 0 and 255 'is really just' 8 ordered bits – they're 'equivalent' in the sense that you can map all possible values of those integers to all possible values of 8 ordered bits, and vice versa, and (importantly in a mathematical sense) in a way such that every integer is mapped to a single set of 8 ordered bit values and every set of 8 ordered bit values is mapped to a single integer. In mathematics that's often described as an 'isomorphism' which is, in working programmer terminology, just a way to convert back and forth between two sets of values 'perfectly and losslessly'.
Charging an EV is not really like filling up with gas. You need a slightly different mindset.

You're not going to be waiting around constantly for your car to finish charging. In reality, you're charging at night while you're sleeping. Or charging at work while you're working. Or charging at the supermarket while you buy your groceries.
Or get a right-hand drive car:

https://www.dailymail.co.uk/news/article-1081607/Speeding-pu...
How to Save Your CPG Business in 4 Steps
Nissan Leaf or Chevy Bolt will both have you covered comfortably from a range perspective. Test drive both and buy the one that you prefer.
> two-pizza

What does this mean?
The size of a team that 2 pizzas can feed?
> And the problem is rust is that we already have other stuff that infest everything: Borrows, mutability, ownership...

I don't think anyone disagrees that the annotation of these concepts play a very heavy role in the type system and cognitive burden of writing code. But there are really three alternatives you can do here:

1. Do nothing, and rely on programmers to manually remember how to do all the necessary bookkeeping themselves. This is better known as "C", and the sheer amount of CVEs and other problems in code written in C is ample evidence that this approach just doesn't work.

2. Make the runtime do the automatic programming. JS is the exemplar of the pattern here. But this approach requires the VM to do garbage collection itself (which adds uncertain hidden overhead), generate code to handle arbitrary shapes (which can result in hidden performance cliffs). And heavily dynamic languages also turn compiler errors (such as fat-fingering a variable name) into runtime errors that can be accidentally ignored.

3. Shift the annotation into a mandatory part of the language, as Rust does. It makes the cognitive burden of writing the code higher, it requires more coding, but the resulting code tends to have the highest performance and lowest bugs of any of these approaches.

The tradeoff you have to make is between "no safety", "compile-time safety", and "runtime safety"; the costs you have to weigh are the costs of testing to uncover bugs, the costs of programmer cognitive and annotation burden, and the (often hidden!) costs of the runtime to dynamically enforce the conditions.

Rust has chosen to live in the camp of low implicit runtime cost and high compile-time safety, and it is really to pay the price for that with extra annotation burden. You may disagree with that choice, but it is a conscious choice that has been made.
This is incredibly useful information
> And why in the world is Wells Fargo not liable for damages?

This is more or less a digital question in an analog situation.

What I mean by that is they could very well be liable however the cost, trouble and barriers to pursue this make it impractical to enforce that liability. This is often the case in both business and life unfortunately.
What's to stop people from forking the entire magic lantern code base and putting it on a self hosted gitlab server physically hosted at a Russian or Chinese domestic ISP that ignores 100% of US copyright/DMCA threats?
You're the one who is not understanding here. All of this "nothing to do with anything sexual" grooming had one specific, simple goal: Make these women feel both powerful and powerless: That they had been chosen and been given gifts, and that their life would fall apart without the approval of their benefactors. These grooming behaviors can be leveraged into the salacious story that was NVIXM's downfall.
Weekly newsmagazine TV shows like 60 Minutes or Dateline or Frontline often cover "consumer rights" type issues, but aren't dedicated to them.
Yeah standard swappable batteries are nice but as we can see in the cell phone and laptop world, they're very restrictive on design choices. And since EVs are very sensitive to weight and aerodynamics, coupled with the fact that EV makers are trying to put as many batteries into the car as they can, there's just no way to make a one-size-fits-all battery that works for every car.

You'd either need to trade off battery density (which means EV range concerns are amplified) or trade off weight and aerodynamics (which means EV range concerns are amplified).

No general consumer EV maker is going to reduce the total range on their spec sheet just to make it easier to swap a battery that also fits several other cars that they don't make. It's not a smart marketing decision.
There's a very cynical part of me that is considering whether this might be a planned action by Google to cycle the FP, and try to get the "disappeared" sites to pay Google for pay-per-click advertising. I wish that was completely unbelievable, but Google has proven to be entirely focused on profit when it comes to monetizing search; and of course intentionally starving sites from getting hits/leads/conversions seems like the best and fastest way to generate profit from their desperation.
“The US has a large NIH attitude and is unwilling to adopt overseas experience or standards.”

This indeed seems to be a problem. The US always wants to lead and if something works better somewhere else there is always the excuse “we are too big/spread out/not socialists” or something else. Or it just gets ignored. See healthcare or internet availability.
> [1]HTTPS encryption itself doesn't meaningfully require public key infrastructure, it's just that without PKI, you don't know who sent the encrypted traffic. Since domains are terrible "identities" and it's common for large organizations to use many of them that sound similar to scam domains, domain validation really doesn't tell anyone anything about whether or not they're talking to a trustworthy entity.

It is trivial to get an EV cert for a company that has the same name as a trustworthy entity[0]. There is nothing in the design of EV that prevents this, and name collisions between corporate entities are common and acceptable practice[1].

[0] https://stripe.ian.sh/

[1] Trademarks are a different matter, but getting an EV cert for a company that has the same incorporated name as a different company in a different state is completely legal.
> Court isn't cheap.

> You're paying for it with a lawyer or with your own time

At some point surely you can countersue for harassment?
I don't understand the glee, schadenfreude even. So because the UI side of things didn't work out, it is an improvement that now all certificates will go back to the "crusty Perl script fetching a side-channel secret from a webserver" method of "validation"?

On the contrary, we should just push for extended validation on all certificates. Whether they come with a fancy UI or not.

Because if we are on the topic of https UI effectiveness, then I'm pretty sure everything we have right now is doing a horrible job and could be removed with much the same tenuous reasoning.
Perhaps they updated the file. I see a "This is Hack all over again, isn't it? Why would it fair any better?" section about 3/4 down.

Was Hack a pain to setup? Getting P++ "for free" with PHP 8 seems convenient.
> usually based on security/code-correctness,

But note that they also tend to consider usability to be part of security and correctness; if the tool is technically correct but nobody can use it without shooting their own foot, then the tool is bad. Hence things like signify - yes gpg or openssl(1) can do what it does, generally, but you'd struggle to use them and be sure that you'd done it right.
How long did it take from vacuum purchase to tickets in-hand?
2.5 seems a little excessive. By that math someone making $100,000 a year salary should be earning $150.00 per hour contract. $150.00 per hour contract at 40 hours a week is about $312,000 a year.

You're right about not being able to make a direct comparison. My understanding, and the reason I choose to work contract, is because we have OHIP, so health benefits aren't too important. I think a company pays something like ~$5,000 a year per employee to insure them. Then when you factor in bonuses (if any) the salary rate is still abysmally small compared to if I were to work contract.

I went from making $70,000 a year in Toronto, to $70 per hour. That jump for me was absolutely massive, and I essentially started making double (after taxes $70K per year became $140K per year).

Perhaps the problem is not the pay in Toronto. Perhaps the problem is with salary developer jobs in general.
Steve Jobs made predictions in the 80s/90s about the future of technology
It typically is in the finance sectors, but not many other places.
A little longer? What am I going to do at a gas station for an hour? I am already bored when I am there for 3 minutes with an ICE car...
> this is an elitist point of view

putting the environment before humans will always be an "-ist" point of view to somebody.

> Taxing will only serve to make travel a luxury for the elite, as it once was.

sure but why not use older technology such as sail boats for everyone else? If you want to travel across the world, it will take you months.

>The economy will adapt. ...with time.

We're out of time. Social justice takes back seat while we get back on track environmentally.
"How is it news?"

Recently piqued interest in antitrust actions for companies like Google, Facebook, and Amazon.
Macau is small.. like real small. Macau is more akin to a neighborhood in some American cities. And it’s not really working fine in Macau. Take a look at it’s leader, clearly corrupt and put in place as a puppet.
For me, Venice is too far gone to change without significant pain to the local economy.

The point of pricing isn't to completely eliminate tourism, it's to lower it.

The goal is to find a price point that cuts down, but doesn't eliminate tourism.

And while it would attract a higher wealth tourist, you can easily adjust the system to a lottery type where you have a certain percent of people who just buy access and others who won a lottery.

They do this out west for river access during the summer. They don't want a whole bunch of people river rafting and destroying the river, so they have a lottery that you have to buy a ticket for. You lose the money if you don't win a license. This creates revenue without increasing the number of tourists. And it also creates a system where people who really want to go there, will buy a ticket without a guarantee of a spot. And,when they do go, they tend to be much better quality tourists since.

I know people who have been buying tickets for almost a decade and haven't gotten a spot.

Something like this is very effective at keeping up revenue and decreasing the number of tourists.
I just want to state that some kind of clear-text inspection of content is and should be absolutely expected for security and DLP purposes in an enterprise environment. If TLS is going to become un-MITM-able, then we need to do it on the host.
Or just don't speed.
After the second go round or so he'll have a form letter. After the 4th or 5th time the DMV people will recognize it when it arrives. If it goes on long enough eventually all the employees will be aware of this edge case and he can probably appeal legitimate tickets.
It doesn't take much to break some of those though.

I have a custom plate that is two common words, on a California 60s vintage plate (black plate with yellow lettering) and most parking garages that check and print your plate on the ticket always butcher it. Instead of (replaced for privacy) "FOO BAR" it will say "8A2M31W" or some garbage.
It isn't irrelevant for point #2 above yours, which is that the JVM could rewrite and run/JIT two versions of every function. The JVM monomorphizes plenty already, does it not?
I think the difference is that mass murderers kill people just to kill people. While other 'traditional' murderers kill for more material reasons (money, drugs, etc.)
`vital means of transport` - definitely disagree here, those "buses" are also dangerous (constant harassment) and also no AC in the summer, drivers openly smoke while driving with passengers in those. I would think those vans are a horrible way of commuting and local authorities don't inspect or monitor those at all.
> I think the DFW quote is actively damaging because it paints a picture of certain places as belonging to a certain group of people by natural right rather than by a more contingent or accidental mechanism.

I don't think it's about ownership of a place; it's that the wonder of the place is destroyed by observation; especially by bulk observation. The question becomes is it better for the wonderous place to exist for insiders only, or for everyone to be able to observe its destruction?

Some places have become so far gone, that tourists come solely to observe tourists.
It does do multiple rounds, but once it has decided on a constraint, it can't revisit that constraint.
I don't understand the odd focus on Google/Chrome here. Apple got rid of EV long before anyone else (on mobile Safari, then later MacOS Safari). Google is following Apple.

Plus this article explains, in great detail, why EV didn't work/couldn't work. Google didn't cause that, nor did Apple. Researchers have been creating examples of EV's problems for years and the evidence has been mounting against them.
So what do we do for the 50 years between now and then?
If there was no switching time, that'd be 7.5 cars / hour for a potentially every-other- or every-third-day quick charge, and the high voltage required does reduce battery life (I think).

I'd be curious to know how long gas stations plan on someone staying at a stall for a full fuel up, to know what sort of capacity in an area would need to be replaced or added.

Part of the benefit of EVs is that fueling points don't require all of the fluids storage and safety; putting in transformers can be easier and allow fitting charging points to many more places a car gets parked. But it'll still be an interesting issue if an optimum charge takes 20-45 minutes.
His blog

https://www.gamasutra.com/blogs/ChrisZukowski/842841/
It is a situation deliberately created by Apple. Whether it is a problem is an opinion.
It's "not wasteful" if you assume that everybody is going to travel a fixed distance, regardless of the price and availability of flights. That's obviously not true. In an instance of Jevon's Paradox, the increasing efficiency of travel has increased the amount of travelling done, and vastly so.
Yes, these are all things we observed in our data.