skysight-inc/HackerNews huggingface dataset:
I have checked the accessibility for 20+ UI frameworks (not just React)[1]. I defenitely recommend Reakit[2], which is an accessibility-first React UI library. I should also check and include Reach UI from your list.

[1] https://darekkay.com/blog/accessible-ui-frameworks/

[2] https://reakit.io/
It's not as easy as that unfortunately. You would apply to the SEALs and get in and be a SEAL for a few years. Then you would apply to SEAL Team 6 and get in there and do that for a few years. And then, finally you would get a tap on the shoulder and be invited to apply to the CIA Special Activities Division, and if you get in there, congratulations, you've made it!
> I’m not even sure where the $200 comes from.

"With only a $150 hot-air soldering tool, a $40 microscope, and some $2 chips ordered online, Elkins was able to alter a Cisco firewall in a way that he says most IT admins likely wouldn't notice, yet would give a remote attacker deep control."

(I don't agree that $200 is realistic, but TFA does at least justify the number)
Yep, though it is not strictly an industrial process, it is also used at home instead of ranno, not everyone has the possibility to burn wood and gather the ashes, and - to be picky - you also need to either remove the first ashes or start the fire without paper or accelerating products.

Then the more traditionalist would also say that you need only this (or that) type of wood ...
I have seen it an eternity ago and I really liked the Zabuza ark. It was indeed way more grounded, at least compared to what happens afterwards.

I wonder how much of the over the topness was planned from the start and how much is just the result of the scaling phenomenon that many shonens suffer from and semi improvised "head above the water" weekly publications.
Seems like a rip-off. Not only do you get to live in sub-standard housing you're making rent-seekers some serious profit margins for nothing. These places should be $250/mo. and everyone should be able to afford them if they need a place but don't have the cash.
I can't remember off the top of my head what he used as a writing utensil.

The hair, from his back.
What this

(def typecheck ((var f) arg env s r m)
(mev (cons (list (list f (list 'quote arg)) env)
(fu (s r m)
(if (car r)
(pass var arg env s (cdr r) m)
(sigerr 'mistype s r m)))
s)
r
m))

says is, first create a function call

(list f (list 'quote arg))

in which the function describing the type (e.g. int) is called on the argument that came in for that parameter. Its value will end up on the return value stack, r. So in the next step you look at the first thing on the return value stack

(car r)

If it's true, you keep going as if the parameter had been a naked one, with no type restriction

(pass var arg env s (cdr r) m)

and if it's false, you signal an error

(sigerr 'mistype s r m)
It's complicated. Sometimes website authors do silly things that negatively impact users; browsers ought to help (without breaking things!) where possible.

Some daily annoyances that I wish browsers would actively mitigate, in no particular order: js-based redirects, blocking copy-paste, disabling text selection, hijacking the forward slash to open the website's own search function (I'm looking at you, Github), hijacking any of my other keyboard shortcuts that I rely on, creatively breaking my back and forward buttons (yes I realize there are legitimate reasons for some webapps), and overriding the built in right-click context menu.
That is like saying <insert app here> only cost $99 to develop (cost of apple dev account). Or suxnet cost $2.50 (the cost of a cheap 2gb USB pen drive)

It ignore the labour, high level engineering and resources needed to execute a supply chain attack like this.
I have the same reaction (physical) to a screaming kid. It has made raising my baby incredibly difficult (especially the first year). Mentally, I understand that it's just a crying baby and that's what they do, but physically I was shutting down - body tensing, a surge of extremely stressful energy rushing through my body and ultimately being left unable to function. My wife thought I was nuts and was just faking it. I tried searching for a medical explanation but came up short. The closest I would describe it as something I hear chronic fatigue people say -- not having energy to get up, no matter their mental state. I would sit there, practically paralyzed by stress, or whatever that stress induced.
i come here occasionally to discover the ideological tendencies of programmers (particularly those in the first world proper) because i am objectively part of that globally privileged class. i'm trying to see if this helps me to navigate the day-to-day contradictions between trying to lead a reasonably comfortable life with my family while also working to sincerely study political economy and perhaps also protect those within arm's reach who are endangered by the US. if i post it's because i'm working something out with myself and just playing around with ideas. not a single person will be persuaded by me. but provoking people like you may be instructional, i'm not sure. like i said this is clinical

how about you? why are you spending your weekend telling anonymous tankies to go outside?
The submitted title was heavily editorialized:

"Rogue Chromium dev lead ignores W3C 'autocomplete' spec; frustrates Internet"
Relevant reply from a Googler seems to be this: https://bugs.chromium.org/p/chromium/issues/detail?id=914451...

by battre@google.com

... which doesn't read at all to me like a "rogue dev" and more like a shared sentiment inside the Chrome team that autocomplete=off should be ignored.

At least, if there is a direct spec violation that breaks all kinds of applications and the answer your hear is "oh well, we're working on giving the user more options and improving our algorithm", that's not exactly encouraging.
Windows runs on refrigerators and signage panels and ATMs just fine. It's not based on since inherent technical inadequacy, people just don't like MS products. Usually because they're late and don't quite align with what normal people want... But I don't think this has anything to do with backwards compatibility. From the Zune to WP10, what kills Microsoft in an area is "Also-ran", "not good enough", and "kinda clunky"
Adobe have already done that for Photoshop CS6...
heh, they copied my website :p https://make-linux-fast-again.com
This is seriously bull shit
Same thoughts as well. I just scrolled half way through to see what the person ended up discovering. The whole bit in between was infuriating.
You can do this with a 30USD soldering iron by eye. None of the other equipment is essential.
Dismissing the above use cases as "developer's whims" is the fundamental issue most people here are taking with these decisions.

I think we can all agree that browser behavior should not be left solely up to the developer and is not a black and white issue. Nobody here is arguing that. We are arguing for following a guideline that makes sense. This is why we have the w3c, an organization that attempts to weigh the needs of user, developers, and browser maintainers.
Freelancing
List of vetted freelancing websites
Subresource integrity is for ensuring that you got the right file (it fails if you didn't), it doesn't do anything with the cache, unfortunately.
I imagine quite a few games never get played once bought.
Those above are not integers but type that you have to explicitly cast integers to if you really want. Please don't make uninformed comments.
Response to “fibers under the magnifying glass” [pdf]
Are there any actual escrows that do that?
"Seriously" rich people got lucky.

You shouldn't bet on getting lucky.
We are adult. And free. You give us option and we can choose. And talk about it.
Frugal Computing
A lot of office buildings in the US have no windows at all.
They seem not. Just one line is nothing. Need to read the f info about kernel.
There is a game called Endless Sky, an open source remake of Escape Velocity, it looks similar, but the overall experience is rather far from the original.
They are in control of their servers. They are not in control of how the user agent (clue is in the name) interprets the javascript and HTML sent to it.
The annoying feature of the old day.
> I don't see many of these car companies surviving another 15 years

especially BMW, they are a very conservative brand. their whole culture revolves around old money, do they understand the future? do they care?
anyone with ethics.
Strictly speaking, Chrome is not ignoring a web standard, since the standard does not require this behavior (no "MUST" keyword).
I use a non-airplay compatible MacBook Pro from mid 2010 and I am rather disappointed at the overall product offering for these slightly older machines. While I find you can mirror the display to an iPad, it seems impossible to use one as genuine secondary display (such that it could be used for extra screen real estate). I paid for several products over the last few months only to be disappointed in this way. Perhaps therefore a niche could be to support older machines like my mid 2010 MacBook pro?
Side note: the Tiger, Leopard, and Snow Leopard VMs in this screen shot were running OS X Server to comply with Apple's pre-Lion license restriction prohibiting virtualization of non-Server versions of the OS. I have no idea which hypervisors, if any, enforce this restriction (nor if old versions of OS X Server are still available for purchase directly from Apple and/or available for non-production use through the Apple Developer Program as they once were).
If the noises aren't too loud, a noise machine can help. I have one on 24/7 and most of the sounds that were irritating me before now get drowned in the noise and I don't even notice them.
https://www.osha.gov/dts/hib/hib_data/hib19960605.html

10% (100000 ppm) concentrations can cause unconsciousness or death even if you have enough oxygen.

It is because we don’t only need to get oxygen from air but also to exhale CO2 as waste. And the higher CO2 partial pressure is the harder it is to get rid of it. Eventually killing us.
Right, so I’m not sure what the purpose of the cost estimate is. To show you don’t need expensive tools? If that’s the case, then 200USD is massive over-estimate. You only need a soldering iron, and the parts.

If you’re looking at the time costs, as I’d estimate this would take maybe a day or two. The time/human resource cost isn’t that right either.

But.. I’m just not sure what the point of the article is...
These methods are ancient. I wish I could claim responsibility, but alas :)

And you can pick up some fresh olives at the local vegan store or farmer's market.
I think I’ve spent less time debugging it and having software issues than my HP 3636 inkjet though. I care about the result more than the fettling and it does me well.
Thank you for that website. As I disable mitigations on all my personal hardware, this saved me a bit of time when this whole thing started and has served as a nice quick reference since.
The link between stress and depression and the 10 words that could help
> this (or that) type of wood

for speed or for taste?
How to 'almost' get your company into Libra association
Krita and Kdenlive are both great.
> no other company produces a laptop that's as well made and long-lasting

Of the top of my head: Dell XPS 13, Huawei Matebook X Pro, Thinkpad Carbon, Surface Books.

Saying MBP are unique is ignorant.
I pull in about two batches of 5-30 torrents every month or two for content I paid for on Humble Bundle.

People who use bittorrent legally do exist, or at least there's one of us.
60dB

As trained sound engineer on HN, you sould use units which mean something, now you essentally just said '60 times more' so people will ask you 'more than what?' :)
Another reason to abandon ship and switch to Firefox.
I believe they only apply to intel
I pay 17.99 Euro for a 'Family' subscription, not for the background option, but simply because on the one hand I want to signal encouragement for an internet model not relying exclusively on advertisement and selling your data, and on the other hand having to play the watch-add/skip-but-not-until-you-have-been-exposed-enough just to watch a video each time is horrible.
> They just care about getting the right results and will complain if they don't

That sounds like a group of people willing to cut corners to get approval from their boss... which isn’t all that different from the incentives in “industry”.
I mean both CSRF and XSS. If your inputs are named something different on everyone’s machine, per session, you can only XSS yourself. Not very useful, you can already do in many other ways.

Also my comment above is not an endorsement of the methodology, it’s just a thing that happened.
“Good” Gossiping, “Bad” Gossiping
As the article mentions, there probably aren't a lot of instances of this, given that software exploits are often easier to implement. And once discovered, can be re-used hundreds of not millions of times very easily.

That said if someone is interested in a specific target or small set of targets, this is a really stealthy way of compromising a system. I would be shocked if every major international spy agency hasn't at least tried this.
Its really not any different than depending on the exact version in some dependency manager. Instead of just the dependency config you check in the binary. When a dev needs a newer version of a dependency they can pull it down and check it in. You wouldn't check in random nameless binaries, just hard copies of things you would have linked to from a dependency repository.

This doesn't work well for dependencies where you're expected to be using the latest version of something that changes 10 times a day.

The rest of your questions are fairly irrelevant as they would be answered the same way as the in the dependency repo case. ie, use official binaries.

...but this is closer to multi-repo than monorepo. If you're in a monorepo you might as well use the source.
The spec only says "should", not "must". Apparently these wingnuts thought that means the spec can be ignored.
Rubbing (isopropyl) alcohol works.
How to burn fat, improve your health and looks 10 years younger
OP here: if you buy the book, I'd like to hear your opinion on the polished and expanded version too!
I wish they included some level of benchmark for the performance gain. In practice, how much of a difference would that make? Also a short summary of what those mitigations protect against would be great.

This way the reader could make an informed decision: do I want to sacrifice X to get Y?
I want a single platform that allows me to conveniently access all the media I want to consume, now and for forever. There's no other way to have one, it's that simple.

Sure I could buy DRM-laden stuff from some online store but there's no guarantee I can access it forever. I could buy a bunch of Blu-Rays or DVDs and stick them on a shelf but that's not convenient. I could pay for a subscription service but not a single one has anything close to everything I want to watch.
What's stopping your from buying a lot and then hiring a contractor to build a house on it?
Depends on the size of the collection. You can get a small (1-2TB) dedicated server for ~$5/month these days. When you get bigger you're looking at something like 64EUR/month for 40TB.

Personally I have a home server which has minimal monthly costs. I just buy disks every now and then.
adobe has essentially added nothing in cc that makes it worthwhile to switch over from cs6, and certainly not for rental software. if anything performance has gotten considerably worse with the addition of creative cloud bloatware
Discussed at the time: https://news.ycombinator.com/item?id=10858189
Honest question: are there companies that do "employee training" in tech? What does that look like?
OT: direct link bypassing imgur’s horribly hostile UX https://i.imgur.com/BjYTgSn_d.jpg?maxwidth=1640&shape=&fidel...
This has turned into a sad chicken-race between Google and developers, with lots of innovative workarounds on Stackoverflow.

Their tactic of overruling web developers doesn't work, it only make things more complicated for everyone, since many of the workarounds have other negative side-effects.

https://stackoverflow.com/questions/12374442/chrome-ignores-...

## Example 1

For a reliable workaround, you can add this code to your layout page:

<div style="display: none;">
<input type="text" id="PreventChromeAutocomplete"
name="PreventChromeAutocomplete" autocomplete="address-level4" />
</div>

Chrome respects autocomplete=off only when there is at least
one other input element in the form with any other autocomplete value.

## Example 2

Simply make your input readonly, and on focus, remove it. This is a very
simple approach and browsers will not populate readonly inputs.
Therefore, this method is accepted and will never be overwritten by
future browser updates.

<input type="text" onfocus="this.removeAttribute('readonly');" readonly />

Style your input accordingly so that it does not look like a readonly input.

## Example 3

Tell Chrome that this is a new password input and it won't provide
old ones as autocomplete suggestions:
<input type="password" name="password" autocomplete="new-password">
I host my blog on a raspberry under my desk. At some point I'll Get around to moving my gitea instance there too, which is currently on digital ocean
ive been eyeing that up for quite a while now. being able to it run on an eink reader seems like a great idea. ive set up the email-an-article-to-your-kindle thing a few years ago but it's still too much effort.
Doesn't this allow four distinct representations of zero?
A thread from 2015: https://news.ycombinator.com/item?id=9599969

2010: https://news.ycombinator.com/item?id=1027417
The Paywalls maker should go to hell
W.r.t. this particular decision, I feel a more reasonable approach here might have been to allow users to manually trigger autocomplete on individual fields with `autocomplete="off"`, and/or to allow users to strip away the ability to disable autocomplete on a site by site basis.

Analogously to how users are able to selectively grant access to certain default-off features for each website (notifications, camera access), users should also be able to revoke access to certain default-on features for sites that abuse them without affecting the vast majority of sites that use the features for their intended purposes to create a better user experience.
How Does BERT Answer Questions?
If the user installs extension to auto fill everything, it is on him.

When the browser decided to ignore spec, it is not user agency at all.

The need for auto fill is extremely application specific and the action is quite often destructive. And it is developer who gets to be blamed for lost data.
Well they are ignoring hundreds if not thousands of developers which is the main issue at this point.
yes, that was tongue in cheek - actual work is done by people writing the kernel
Should have used MATLAB.
Can anyone explain why the same behavior does not occur on https://www.sbb.ch/, the Swiss equivalent (which is based on the same software by HaCon)?

E: as soon as you submit a search on sbb.ch, the same problem occurs.
SoWrong: absurd ways of doing perfectly normal things
It’s a relatively popular choice but I’ll ask you about it...

I see a lot of people putting their home stuff behind CloudFlare, but when I reviewed their free tier, I didn’t actually see any security benefit to outweigh the privacy loss, and I didn’t see that covered on your blog post.
No, it's not a requirement in the spec. Chrome is actually spec compliant regarding this issue.
Transferwise is more of a middleman IMO. I wouldn't use them in lieu of a bank but they are wonderful to use as a money dispatch.
There are some benchmarks of mitigation impact on Phoronix [1]. These benchmarks are only for mitigation sensitive workloads so real world impact will be lower.

[1] https://www.phoronix.com/scan.php?page=article&item=amd-zen2...
Making a long-term investment to squeeze it for unsustainable short term profits is genuinely stupid.

If you've got a better name for it I'm all ears. But PG&E has been neglecting their infrastructure at least since the early 90s when their lackadaisical approach to clearing brush led to the Sierra Fire in '94.

Keep in mind that PG&E's record keeping was so lax that they blew up a neighborhood in San Bruno after increasing the pressure on a gas pipeline without knowing if the line could support such pressure. Apparently PG&E also got sued a couple years ago by shareholders alleging gross mismanagement and demanding safety reforms. I'd say there's plenty of stupid and greed at PG&E to go around.
This is why form elements should never be hidden after loading. Display none should be the default in the HTML for non-relevant content, which should be enough for most autofillers. It also prevents flashing of content when autofillers try to populate it, causing the hiding to delay, which I recently saw in a production app.

Frameworks like React and Vue don’t even render the HTML into the DOM until conditions are met so the situation is improving.

Another positive step away from jQuery hackery!
Python Snippets You Should Learn Today
Yes, bunq. They are absolutely wonderful and the API is so good there's a whole community of apps out there including a Linux desktop app.

But they cost 9 eur a month, they don't have a serious free tier. Still, I use them because I think their offering is worth what I pay for it.
http://archive.is/2t5BK
Windows 2000
ISS 5
FTP
SQL server 2000
I think it mentioned chrome is even now ignoring ‘display:none’ and ‘visibility:hidden’ declarations so those workarounds no longer work either.
Yeah, aren’t most games single-threaded? I doubt this affects gaming performance very much.
> The spec only says "should", not "must". Apparently these wingnuts thought that means the spec can be ignored.

Not arguing in favor of this particular choice, but yes. That is exactly what "should" means in most cases.

For instance, in RFC 2119: https://tools.ietf.org/html/rfc2119

> SHOULD This word, or the adjective "RECOMMENDED", mean that there may exist valid reasons in particular circumstances to ignore a particular item, but the full implications must be understood and carefully weighed before choosing a different course.
I used to have things in a colo but now I have fiber at home, just about everything is on a single giant machine, complete with graphics card for a gaming VM:

VM management: libvirt (used to host gaming PC and financial applications)
Container management: Docker (used to be k8s but gave up)
Photo gallery: Koken, Piwigo, Lychee
Media acquisition: Radarr, Sonarr, NZBGet, NZBHydra
Media access: Plex
Monitoring: InfluxDB, Grafana, cAdvisor, Piwik, SmartD, SmokePing, Prometheus
Remote data access: Nextcloud
Local data access: Samba, NFS
Data sync: Syncthing
WireGuard
Unifi server
IRC: irssi, WeeChat, Glowing Bear, Sopel (runs a few bots)
Finance: beancount-import, fava
Chat: Riot, Synapse (both Matrix)
Databases: Postgres, MariaDB, Redis
Speed test: IPerf3

I also have a seedbox for high-bandwidth applications.
There are no semantics to discuss. Chrome is spec compliant. That's a fact. Words like "should" and "must" have well defined meaning that is clarified in every spec document, which I would highly advise you to read before writing any further comments and insults.
The issue is that the browser is supposed to be the meeting place for negotiating between developer and user preferences. Its job is to take into account preferences of both sides, and render the site accordingly. Not to be a third party at the negotiating table. Breaking agreed standard in a way that can't be overridden by the user? Browsers should never do that.
In one comment chain, we have Regan (sic) blamed for "privatizing" CA utilities and Trump blamed for CAHSR.

Whether or not you agree with his actions Trump absolutely tried to kill CAHSR.

https://www.latimes.com/local/lanow/la-me-high-speed-rail-20...
There was a nice video from a British Youtuber who often forages for mushrooms when he found some: https://www.youtube.com/watch?v=wYBruVj9jt8