skysight-inc/HackerNews huggingface dataset:
Back in 2008, I chose PHP for my first forays into web programming because of how easy it was to setup and use compared to other solutions I was aware of. The last time I touched it was back in 2011. Python has pretty much completely replaced PHP for me. Get a good basic web framework like CherryPy or Bottle and couple it with a templating engine like Jinja2 or Mako and you can do anything you could do in PHP, but in a better ecosystem.
It seems like Google is de-ranking independent websites, rather than actually analyzing whether a website provides good information or not.

I'm not sure that this is happening intentionally - it's probably way more difficult to figure out a way to automate a "quality of information" rating, rather than just prioritizing websites for companies that make lots of money.

However, this has the unintended effect of narrowing the overton window for "acceptable" opinions. I've found that it's really difficult to find good results for niche topics on Google nowadays.
Show HN: Commandeer 0.2.0 Released – AWS, Algolia, LocalStack Desktop App
https://hackaday.com/2014/04/04/sql-injection-fools-speed-tr...

Another picture (which I can't seem to find now) purportedly showed how one of the screens over the highway was displaying just an error message after triggering this exploit.
A) It doesn't take an hour to charge an EV unless you're charging past 90%, which isn't typically done as it hurts the battery.

B) You're bored b/c you have to stand next to the pump waiting for it to finish. This isn't a problem with EV charging. Go get a coffee or read a book.
It sounds more like snowballing costs as you deal with technical debt by throwing more Heroku at it.

It has seemed apparent to me for some time that contractors/developers are pumping costs and milking change orders, with cities going along with it, possibly due to limited numbers of contenders. Similar to healthcare costs being a dance of growth between insurance and medical providers.
Is it fair to say that Python is the new BASIC?
He can challenge the fines but still has to pay court costs most likely.
When faced with a difficult problem one trick is to ask how you would view your choice in hindsight a year later. I use that technique a lot and find it helpful. It seems as if there are many ways to attain objectivity about decisions, which casts doubt on the notion that illeism has any special magic.

Moreover, the argument that speaking in 3rd person made at least Caesar wiser seems doubtful. Caesar's writings are historically interesting but also considered artful propaganda hidden under apparently plain speech. [1] There's no particular reason to infer that Caesar used this device otherwise. As transmitted by Sallust, he referred directly to himself ("magna mihi copia est memorandi..."--"I find ample opportunity to mention...") when arguing against hastily putting conspirators of Cataline to death. [2]

[1] https://en.wikipedia.org/wiki/Commentarii_de_Bello_Gallico#M...

[2] http://penelope.uchicago.edu/Thayer/L/Roman/Texts/Sallust/Be...
This caught my eye

"It turns out if the seller publishes some list of probabilities and lies about them, the seller can make significantly more money," Elmachtoub said. "There is a benefit for lying. Since there's a benefit for lying, there must be regulation around this."

Elmachtoub said games need to be monitored to ensure publishers are actually following the probabilities they post, and it needs to be tracked not just in aggregate but on the individual consumer level because it's otherwise possible to gain more money by extorting specific individuals.

....

"Another unique thing about loot boxes versus baseball cards is that companies can see your inventory. That's a fundamental difference. Being able to take advantage of that would obviously be beneficial to the seller and allow them to exploit more.
https://wiki.php.net/pplusplus/faq#this_is_hack_all_over_aga...
> It doesn't appear to be much different than other health websites

We go faaaaaaaaar more in-depth.

Eg collating human in-vivo research: https://examine.com/supplements/creatine/#effect-matrix

Summarizing body of research: https://examine.com/supplements/creatine/#scientific-researc...

We sell information because that keeps us on our mission - to analyze health research.

Our primary driver is a monthly subscription utilized by professionals that breaks down the latest nutrition research.

Here's a preview if you want to see how in-depth we go: https://a99d9b858c7df59c454c-96c6baa7fa2a34c80f17051de799bc8...
Reusing the stack frame layout for a continuation state block is a really neat approach!

Internal pointers into the stack aren't really the reason Rust can't take this approach either, though, unfortunately. Async frames are "pinned" once they start running anyway so the ecosystem is designed around not needing to move them. Async callee frames are, in a sense, contained in their caller's frames- this makes async recursion tricky, but in exchange each static call graph uses a single allocation.

The real issue is basically naasking's #1- not that Rust loses its IR or that it's platform dependent, but that LLVM simply doesn't have the infrastructure to work with stack frames directly. A sufficiently motivated+funded team could add it but Rust doesn't have that luxury.

In fact, this is also the reason that C++20 coroutines individually heap-allocate their frames. No compiler had the infrastructure or was able to put in the work in time. There are also some thorny problems around phase ordering here- stack frame layout typically isn't determined until very very late (to enable optimizations) but program-accessible types in both C++ and Rust need to know their sizes very very early. Java can sidestep this by being slightly higher level.
I'm trying to replace my 2012 SUV with another SUV. I've been looking all over for a plug in hybrid SUV, and there aren't any good ones. I want the plug in hybrid because 95% of the time we do less than 30 miles locally, but once in a while we drive a couple hundred.

I would be fine with an all electric SUV with a decent range, but those don't exist either. The model X is not sufficient, and is also terrible for everyone who isn't the driver (and also costs way too much for what you get).

Hopefully this change means that in a few years I'll be able to find what I want.
From what I can gather reading Russian-language media, it was a sea platform-based static(?) fire of a hydrazine-fueled rocket with an RTG onboard (little of which makes sense to me, to be honest; might be a cover-up/lie by MoD, or it might be some experimental payload or vehicle). The fire supposedly happened after the test, when the crew approached it. Some people were thrown to the sea by the blast and proclaimed dead after an unsuccessful search and rescue operation. The "radiation spike" reported in the article was a minor increase in radon concentration, the link with the accident being unclear.

In any case it's probably not the infamous SSC-X-9/Burevestnik missile or we'd have seen at least some indication from independent monitoring sources already. (which are aplenty in the area, for obvious reasons). I'm waiting for radioisotope analysis confirming it was the nuclear thermal engine but there's still nothing, after 4 days.
Duckduckgo?
It's actually kind of unfortunate, as in some ways an organization's name is a much more meaningful expression of identity than a domain name is. When I visit the website for my bank, I don't really care that the entity I'm communicating with owns "mybank.com". What I, and I suspect most people, are really concerned with is that the entity they're communicating with is the same physical, real-world organization they opened a bank account with in the past.

The problem is that legal corporation names are much harder to verify than domain names, and even once verified they don't always match user expectations (as Ian Carroll so aptly demonstrated with his Stripe Inc. certificate). Furthermore, and perhaps partially as a result of the aforementioned issues, browsers don't treat EV certificates in a way which would allow any meaningful security guarantees to be built on top of them.

I wonder if there are ways this situation could be improved. Brand names, for example, are probably more likely to match user expectations than legal company names. Perhaps an alternative to EV could be built around that idea.
https://threadreaderapp.com/thread/1152625267589840896.html
Can you recommend a summarising read up on this?
Ask HN: How affordable is a degree for a CS job in your country?
I’m having trouble finding good compiled information covering more than a sprinkling of the Americas and Europe, so I figured I’d ask HN.

How affordable is it in your country as a resident to attain a respectable degree for a computer science job? By respectable I mean a FAANG would consider hiring you based on the degree and the university (4 year BA/BS minimum).

If you can reference affordability to another nation (such as the US, UK, CA, etc.) that’s even better. Please consider typical incomes after taxes if you can.

ESPECIALLY WANTED
Figures from Asia: India, China, South Korea, Philippines, Taiwan, Japan, Nepal, Pakistan, Turkey, etc.
I had a backtick in one of my passwords very long ago. When I first got my iPhone I couldn't figure out how to type that backtick until I realized one needs to press and hold and apostrophe.
Put the fast chargers at shopping centers.. Unless the car is run down to nearly a dead battery, it won't need but about 20 minutes on the charger. That's about how long a short trip to the grocery store takes.
I wonder how much you could sell that to them for if you were really good at negotiating. Maybe as much as $100k?
Not only does that value let players cash out to some extent, it limits the amount 'whales' will commit to the game.

Good Magic decks range from "not cheap" to "breathtakingly expensive", but no one assembles tournament-level decks purely from opening packs; they buy at least some of the cards from aftermarket sellers. That's a fixed price for a known good, which gives some confidence that people are making rational buying decisions even when they spend a huge amount.

Even casual players are quite likely to open packs, find some things they want to build around, and then fill out what they need by trading or buying. It offers a backstop on the entire system that digital and especially non-transferable products simply don't have.
"would you rather we think about and discuss the systemic forces that lead to these results?"

Why wasn't this question asked every time the media screamed "terrorist attack" when muslims were involved? I agree with you, but my question is why now? better than never? I'm only drawing attention to the systemic racism that you're advocating for society to look into. It can't be more clear when we suddenly wake up after the attackers turn out to be white.
I believe so. Any memory safe language (not just Rust) would've prevented memory corruption. One of Rust's aims is to target embedded development, so one might hope for software such as these to be written in Rust at some point in future.
Someone is on it:

> Xfway Aims To Provide A Wayland Compositor Inspired By Xfce's Xfwm4 [1]

> While it doesn't appear to be an official part of Xfce at least at this time, Xfway is a Wayland compositor inspired by Xfce's Xfwm4 window manager.

Xfway was pointed out on the Wayland mailing list [2] for this Xfce window manager inspired compositor.

The code appears to have started out from the Weston code-base but adding support for Sway's WLROOTS among other changes inspired from Xfwm4.

Those wanting to give this Wayland compositor a whirl can find it on GitHub [3].

[1] https://www.phoronix.com/scan.php?page=news_item&px=Xfway-Xf...

[2] https://lists.freedesktop.org/archives/wayland-devel/2019-Ju...

[3] https://github.com/adlocode/xfway
Call the parking department of your local PD. They will gladly write a ticket to that Teshole. I've seen the same in my 'hood, and it's highly annoying.
If we are banning sketchy medicine sites could we ban healthline and webmd?

Those websites use scare tactics to push users through 10+ page "top 10 illnesses based on your symptoms" list which are often not even researched to the point of any accuracy and only written to drive ad revenue.
Roundabouts are occasionally used in the US, but they are not a panacea. They require much more space than conventional intersections, and can't easily be converted to traffic lights. It's also difficult for visually impaired people to navigate roundabouts, so it can be hard to be ADA-compliant.

The Department of Transportation published a study about 20 years ago about roundabouts [1]; I'm sure most American Civil Engineers doing road design are familiar with it.

[1] https://www.fhwa.dot.gov/publications/research/safety/00068/
Yeah, bureaucratic red tape often becomes part of the economic moat protecting the incumbent providers from competition.
Java sidesteps this because we generate concrete machine instructions and have control over the low-level platform-specific representation. In other words, because our backend is lower level, not higher level. But yeah, if you don't have access to the low level representation -- like Rust and Kotlin -- you don't really have a choice except to wait for your backend to give you that access. Sometimes waiting is a good approach, though. I'm not even sure you need control over the stack representation; it's sufficient to know what it is, which you could maybe do even on top of LLVM (but I don't know LLVM well enough to say for sure).
Link: https://forum.xfce.org/
Sorry yeah autocorrect
Why push for extended validation of there is no security benefits and the user experience is the same?

I remember that someone had successfully got an extended certificate for "Stripe, Inc".

Things like certificate transparency log monitoring seems better than EV to improve security.
Wouldn't that be priced into futures contracts? Even with all the problems with Iran, the price of oil is really low in a historical context.
I had a standard 8-digit Indiana TK series truck plate which would get flagged as "unregistered" by the broken ALPR systems in other states.
The Volt also had the wrong body style based on changing consumer preferences. If GM had put the Voltec drive train in a compact SUV it probably would have sold better.
EVs are pretty popular in China where owned personal parking spots are relatively more rare. Somehow they make it work out, though I personally wouldn’t bother with an EV until I had somewhere to power it at home.
And most people can get by with charging a current gen long range EV once a week if they don't have a charger at their residence.

Not everyone, but most people drive less than 250 miles a week.
Not all Code Signing certificates are Extended Validation. Non-EV Code Signing certificates bypass that warning (Authenticode). So it has no impact.

Code Signing will still be $175 too expensive and still work just as they have.
No sane man will hurt his users intentionally. It won't happen.
That kinda dealer/salesman would've hated you for paying cash as well...
Never had a driver who smoked yet. On the other hand, tell me something, how do you get from Paterson or Passaic to NYC or Union City in less than an hour and at an affordable rate? NJTransit is slow whether it's train or bus, and they're at the absolute upper limit of being affordable. When I say they're vital, I absolutely mean it. For those of who have relied on the buses in and out of the City, the NJTransit option simply isn't viable on a daily basis compared to far more reliable and numerous jitneys. Uber & Lyft are simply out of the question on the basis of cost.

Oh, and add in the fact that for those of us who live in Jersey and cannot drive, options are limited overall.
Many ticket systems are awful for reasons other than being ticket systems.

For instance there are all the JIRA installations that have more options to make a ticket than there are dials at the flight engineer's station on a 747 in the 1970s. There are the issue trackers that run on a server that has too little RAM so it takes 30 seconds to load that bloated "create ticket" page.

I think making something more fluent than the typical issue tracker but more structured than slack would be the way to go.
Solar Impulse
Is it feasible to put in hundreds of high voltage chargers?
Because I want them to do better.

As an environmentalist this vehicle goes against my ethics. It exists to allow them to sell more pollutant vehicles in California. It's all sizzle and no steak. There are better EVs out there. Most car manufacturers will take customer feedback to incorporate into newer models. FCA is having none of that with the 500e. They aren't interested in customer feedback just government CAFE regs.
Because then you'd be centralizing control of certificate validation in a single corporation, and creating a too-big-to-fail CA that can't be distrusted if it screws up for fear of breaking the entire internet.
Training Systems Using Python Statistical Modeling
Ah, well that helps explain their motivations. It is a bit odd though that they are still holding major companies that have significant negative environmental and social impacts though. At some level, it's just virtue signalling with no meat. Either you care enough to divest your holdings in significant polluters, or you don't.
> "a privately operated citation processing center"

In a way, this is the real bug - one that affects more areas of local government than most people know or understand.

Our local governments are constantly seeking - and usually getting - private companies to do what should be public. The potential (and actual) repercussions to the system are serious.

For instance, how do such arrangement affect FOIA requests? What about other forms of transparency? Are we really getting our money's worth as taxpayers? Is the money actually being used properly or are costs being inflated?

It's a form of government privatization "by a thousand cuts" - we already know of the problems inherent in the system of privatizing out and contracting of private prisons; plus the loop they cause because of recidivism rates, because a repeat "customer" is better for the bottom line than one reformed for society. Which may be better for the private company, but has huge costs to society itself.

I wouldn't doubt that similar issues are happening with the privatization of other parts of our local government. It is sickening to me, personally.
> People don't care about others anymore

Which was inevitable. Rule enforcement (all kinds, not just the police) works on the premise that most people will be reasonable and follow the rules, or social pressure will handle it.

But then you throw in "no one likes a snitch!", "This rule isn't enforced so why should I follow it?", "They're trying to enforce this rule I don't like, they have better things to do!", and you end up with a perfect storm: We shouldn't care about anything that won't get you in trouble, and you shouldn't get in trouble for anything. Push that to its limit and you get some extreme case of individualism.

You mention schools, but schools are basically no longer allowed to enforce anything else they get sued by some entitled parent.
I never knew examine.com and now I've taken a look. I've found a lot of pieces of information which are, as far as I know, legitimate and good to know.
The Gen 1 Volt wasn't just a Cruze body and was a hatchback closer to the "cross-over" territory that is currently all the rage for them. For cost cutting GM moved the Gen 2 Volt into a Cruze body, and then GM killed the Gen 2 Volt for not being a cross-over or hatchback.
If the full-time indie game programming career doesn't work out, remember to clear this blog post before going job hunting again...
Mitsubishi has a plugin hybrid SUV. It's called Outlander PHEV.
Good timing for this - the Team Fortress 2 hat market just collapsed over a change in drop rates.

It's probably worth differentiating tradeable loot boxes, which end up used like stock speculation, from untradeable ones, which seem to be used more like slot machines.
First, CreditKarma makes their money by spreading the surveillance profiles on you to other surveillance companies that wouldn't otherwise have that data.

Second, the main thing that requesting a copy of your surveillance dossiers does is make you responsible for refuting any incorrect information in it, as you have now been notified of it. This fuels the ongoing perverse incentive wherein the surveillance companies are relying on you to do their diligence for them.

If you want to push back against this offensive system, engage with these parasitic pests as little as possible. Barring some sea-change like the US adopting the GDPR wholesale, this is the only choice available to you.
Yeah, this is what I don't understand, but maybe it's because my wife and I are a one car and mostly public transit oriented family.

What I want: A hybrid electric with ~40 miles of battery and a 300mi gas tank for longer trips

What Auto Manufacturers assume (I'm guessing): 2 car households where one is 100% electric and the other 100% gas.

Seems to me like the plug in hybrid is the best of all worlds. Everyone can use battery for all the short trips we do and we don't make any compromises for our long distance needs.
Thanks! (Even, if reasults aren't what we may have hoped for.)
It's not just executives and directors who benefit from buybacks. It's shareholders. I've personally benefited, and I'm not in the 1%. Anyone who has an index fund or mutual fund in their 401k benefits from buybacks. So, you could make a case that buybacks (when used intelligently) benefit retirement accounts, which is a kind of public good.

Now, the question is, how long do the benefits last? And are buybacks always beneficial? I think that's debatable. There's data on both sides of that argument, but I do think that most companies don't use buybacks judiciously. Berkshire Hathaway does-- buying back only when they have cash that can't be put to a better use, and only when their share price is below intrinsic value. But most companies are using leverage to fund buybacks, which is a short-term way to benefit shareholders at the cost of long-term deterioration of the balance sheet.

I certainly hope we don't outlaw buybacks, but I think there's a case to be made that they shouldn't be done via leverage. Good luck trying to legislate that behavior, though. Money has a way of finding loopholes, and such legislation will almost certainly have negative, unintended consequences.
Intent to Implement: CSS Modules V1
> The “software crisis” was first identified in 1968 [NR69, p70] and in the intervening decades has deepened rather than abated. The biggest problem in the development and maintenance of large-scale software systems is com- plexity — large systems are hard to understand. We believe that the major contributor to this complexity in many systems is the handling of state and the burden that this adds when trying to analyse and reason about the system. Other closely related contributors are code volume, and explicit concern with the flow of control through the system.
Also take a look at selfhacked.com. It's a treasure.
I had something similar happen with (iirc) spectrum of the power company a couple years ago. Their customer portal let me use a complicated password to sign up, it sent me the confirmation email prompting me to log in, and refused my password for forbidden characters. But then I couldn’t reset my password because I hadn’t verified, and I couldn’t modify the account cause I couldn’t log in. I was just trapped in limbo. Customer service said they couldn’t fix it for me. I had to pay my bill by phone until I moved.
its also illegal in pretty much every jurisdiction that i've ever lived in