skysight-inc/HackerNews huggingface dataset:
https://github.com/tunz/js-vuln-db

I'm not sure Javascript has fewer security problems at all. Sandboxes help a lot, but not all sandboxes are equally strong and Javascript engines routinely get popped.
I'm not sure what you mean by "more typical." If you mean the "major.minor.bugfix" thing that was the norm for a while, I think we've all realized it's basically useless. So many projects had no criteria for incrementing the major number, so it would just sit at 0. or 1. forever, informing no one of anything. So don't think of it as "a new major version every couple of weeks," think of it as dropping the implied (and useless) "1." major version with a new minor release every couple of weeks :-)
This seems like a great service! I will definitely be setting up an account to cover the cost of running my podcast.

If you don't mind me asking, What makes Buy Me a Coffee different from setting up a Patreon or a go fund me?
It would annoy me yes if my genuine interest would be mistake for condescension because I choose my words wrong. This makes for a very unwelcoming culture.
What's science fiction about doing auto-machine learning? It's basically automation of a lot of the tasks that data scientists do manually to build simple ML models.

That is definitely a technically challenging problem but not an impossible one.

If anything AWS is late to this.
You're still confounding and not understanding what I'm saying.

Whatever organization has oversight of that doctors should have oversight - that doesn't negate the challenges of regulatory capture that is occurring.

That you're completely dismissing my own personal experience, that I'm willing to spend $100k of money I'd much rather spend elsewhere, shows just how dismissive you are. I didn't argue my own experience as part of the data that does exist relating to stem cell treatments either, like you're seeming to counter argue with.

You should probably dive into the existing research, and not depend on using whatever mainstream sources you've used to develop your narrative and arguments - seems you're falling into the narrative mainstream media wants you to follow.
Indeed. Scrolling Monaco editor here https://microsoft.github.io/monaco-editor/ feels much smoother on Firefox than on Chrome for me in my very unscientific macOS test.
Disclosure: I work at AWS

Stay tuned!
The community feedback and rewards features are really interesting and remind me a lot of the Twitch model which is wildly successful. How do you plan to bridge the gap between user's eagerness to donate to a twitch streamer versus their historically poor record of donating to a blog via a donate button? I think its definitely possible but the form-factor of the content (video w/validation through a strong emotional reaction by the streamer versus the abyss of blog comments/email) really matters.
No pricing information before sign-up?

It's not likely that this is a novel idea to anyone signing up, so the number one thing they want to know (surely?) is 'how much are you skimming'.

Personally I'm not willing to sign-up first in the hope that maybe more 'how do I actually use this and what does it cost me' information is available afterwards.
Buy Me A Coffee is more than a simple donation button/link. We help creators set up memberships, publish members-only content, website widget and more. You can read the full comparison here - https://www.buymeacoffee.com/ko-fi-alternative

That said, we're big fans of all creator monetization companies like substack, patreon, ko-fi, etc.
The Vega-C rocket brings the noise
You really need to optimize tge landing page for mobile clients. Im using a powerful android phone and it struggles to load. Just shows a blank page.

You should also remove the letter by letter animation on the headline. I don't have time to read all of nouns you have listed. Just cycle through whole words using a faster tick speed.

And better yet, turn this landing page into a static one without any JS. Conversion numbers will be more reliable because people wont be quickly bouncing while waiting for the page to load.
From the accompanying video (17:11)[1] it's not Turing complete "because the verifier rejects unbounded loops and so there is some things that are not possible. We do have bounded loops in BPF now."

1: https://youtu.be/7pmXdG8-7WU?t=1031
if you want read only access you can use the nick justinfan{randomnumber} and then join what ever channels you like. But its read only so you can't on even pull a list of a channels moderators without signing in with an auth. (The user list only shows active mods in smaller channels, but you can ask the server for a list of the mods in the channel if you have logged in with a valid oauth)

> $ ncat -C irc.chat.twitch.tv 6667

> NICK justinfan123

> :tmi.twitch.tv 001 justinfan123 :Welcome, GLHF!

> :tmi.twitch.tv 002 justinfan123 :Your host is tmi.twitch.tv

> :tmi.twitch.tv 003 justinfan123 :This server is rather new

> :tmi.twitch.tv 004 justinfan123 :-

> :tmi.twitch.tv 375 justinfan123 :-

> :tmi.twitch.tv 372 justinfan123 :You are in a maze of twisty passages, all alike.

> :tmi.twitch.tv 376 justinfan123 :>
For the first 3 years of Stream we used Cassandra. Afterwards we switched to a custom RocksDB + Raft solution. (somewhat outdated stackshare interview: https://stackshare.io/stream/stream-and-go-news-feeds-for-ov...)

The difference is massive. Cassandra was hard to manage and after many years of our team using it still had random spikes. RocksDB+Raft has been extremely solid, doesn't require any maintenance, load times are flat, zero spikes.

Cassandra was awesome, but it definitely has some issues. That's also why companies like ScyllaDB see space in that market. I wonder if AWS's cassandra implementation is better than regular cassandra.
The FF dev tools is one of the reasons I switched. IMO, they are miles ahead of Chrome. Or at least, they were when I switched up until a few months ago when source maps stopped working. Without the possibility of debugging, it makes the dev experience much worse. I wish they would focus on fixing crucial bugs like that instead of speeding up the loading time. One gets you the dev tools a few milliseconds faster and the other one is a core functionality of the program. And yes, they work fine in Chrome and the way they are generated hasn't changed in 5 years.
How is your TV going to get onto a wifi connection that needs an Xfinity customer login(yes there are open to all customers as in they can use the wifi connection but not without supplying a login)?
At this level, the market demands non-linear value. http://achewood.com/index.php?date=01132006
The underlying individual assets didn't really turn out to be poorly rated. The problem was they assumed a low-level of correlation between the risk of individual assets. Basically, they believed default risk for a house in Milwaukee essentially an independent variable compared to default risk in South Carolina. They made that assumption because there had never been a nationwide (or global really) housing crash.

That assumption actually drove nationwide demand for mortgages, which lowered rates, thereby creating the correlation they assumed didn't exist.
If you know of an all-CSS solution, I'm all ears
I don't see anyone having mentioned the possibility of posting this data to Usenet at all - at minimum for archival purposes which should be good for ~8-9 years. That way at least the data isn't lost. With so many of those torrents have 0 or 1 seed, this is a serious risk I think, despite the comments elsewhere about people rotating what they seed.

I realize that doesn't solve the access problem for most people as most of the users who need this research might not know how to use usenet or even be familiar with it at all, but I think the first major concern would be to secure the entire repository on a stable network. Usenet seems like a good place for that even if it doesn't serves as a means of distribution. Encrypting the uploads would make them immune to DMCA takedowns provided that the decryption keys weren't made public and were only shared with individuals related to the maintenance of the LibGen project.
This is the 3rd post from the advent.

day 1: Why the world needs more search engines https://www.0x65.dev/blog/2019-12-01/the-world-needs-cliqz-t...

day 2: Is data collection evil https://www.0x65.dev/blog/2019-12-02/is-data-collection-evil...
Networked remote control, to help you control the TV from the opposite side of the world.
That fine line is entirely a cultural construct though. I feel like my culture is much more inclined to assume anyone talking to them at work has good intentions. Seems like a better strategy from a game-theory perspective as well (tit for tat).
”I have a personal theory that the overwhelming aroma and taste of hops in a beer can be used to mask many errors and missteps in the brewing process”

I think there is something to this. the same happens to other foods too. Just make them extremely spicy, cheesy or sweet and you don’t have to worry about taste subtleties anymore.
“Amazon could be a leader, and they have the resources,” Fagan said. “They could be a leader in providing good occupational health care to their employees. And they are not doing that.”

BEZOS, YOU HAVE FAILED YOUR PROFESSION!
awesome - we'd love to have you on the platform!

technically, the biggest difference is that you can also accept one-time payments using Buy Me A Coffee, and not just memberships. We see more than half of the payments from one-time contributions. More comparison here - https://www.buymeacoffee.com/patreon-alternative
I don't get out to too many taprooms anymore, but I used to be in the habit of ordering their pils or lager first, since it's much harder to hide the quality behind the hops. Generally speaking, breweries that have good beers of those styles are good across the board, while those that don't have a lot more variance.
Yes, and? Ever heard of the heat death of the universe, bootlicker?

> When instrumental reason is the sole guide to action, the acts it justifies are robbed of their inherent meanings and thus exist in an ethical vacuum. I recently heard an officer of a great university publicly defend an important policy decision he had made, one that many of the university's students and faculty opposed on moral grounds, with the words: "We could have taken a moral stand, but what good would that have done?" But the moral good of a moral act inheres in the act itself. That is why an act can itself ennoble or corrupt the person who performs it. The victory of instrumental reason in our time has brought about the virtual disappearance of this insight and thus perforce the delegitimation of the very idea of nobility.

-- Joseph Weizenbaum
Speaking as someone who went through a Bay Area bootcamp (Hack Reactor) it seems to me that it would be more cost-effective to work with a local reputable bootcamp and interview candidates who will soon be graduating. You won't get the top of the class with your salary offering, but I would confidently hire any of the people who came out of my bootcamp's cohort.

You should also consider remote candidates from places where that salary is livable (not SF Bay Area or NYC).

I would say nearly 100% of my bootcamp cohort came in very rough, with little to no production experience and not ready to do any kind of productive work. The bootcamp really started with the basics which we worked on for 10 hours a day / 6 days a week in JavaScript - data structures, algorithms, and many many toy problems. After six weeks of that, we were introduced to Node, then Backbone and finally React and Angular.

I don't think you want to invest that amount of time in developing a curriculum and becoming a bootcamp just to get some cheaper junior engineers. There's a reason why bootcamps are not super-lucrative -- good instructors cost money and there's a ton of competition from other bootcamps so they have to price their product competitively.
> That you're completely dismissing my own personal experience, that I'm willing to spend $100k of money I'd much rather spend elsewhere, shows just how dismissive you are.

Look, people have "personal experience" that prayer cured their cancer, that essential oils fixed their bipolar disorder, that aliens anally probed them, etc.

Having invested large amounts of money can make one susceptible to sunk cost fallacies, too.

"I say it works" is worthless by itself. Sometimes, worse than worthless - actively harmful. The FDA approval process may not be perfect, but some sort of scientifically rigorous "does this work and is it safe?" is necessary.
Thanks for the feedback, I'll make sure to spell it out in the future.
It was nice of him to tell us as much as he did and as far as I'm concerned he did tell us how much he got paid. The answer is he made more than he would have working as an engineer over the same amount of time ("more" is based on the value of the brand and the email list). For reasons that should be obvious it's not more by a lot.

> There is a difference between $10k and $120k

How do you get 10k based on what he told us?
You can buy 48TB (4x12TB) for €1000. Store some index on an SSD, and you have another full node.
I have a policy of never allowing a MDM policy on my phone. I use the web portals for calendaring, email. Notifications for calendar events are usually parlayed into SMS notifications.

There's also questions about "IP" law here. If you're developing interesting software at home, having separate hardware for that work is going to be critical for the legal analysis to get funding, etc.
Totally agree. Words only make up part of communication. There are >300 comments on this thread because everyone has their own way of saying this phrase based on how they would be received if they said it at their workplace.
IPFS isn't really an alternative to rsync, but the rest of your point stands.
Reducing Multi-Region Latency with Follower Reads in CockroachDB
Excellent analysis by Deloitte. https://www2.deloitte.com/us/en/insights/economy/issues-by-t...
> Google's accusations are very explicit about what these people were doing:

Are they? If you can quote for me where Google actually states these people leaked material, I'll concede the point, but they don't. Google says two things:

1. These four individuals searched for information that was outside of their job scope

2. Information these individuals searched for (along with other information) was shared externally

They don't claim that the individuals that did 1 also did 2, in fact the statement is carefully worded to not make that claim, but to still heavily imply it. The untrue (or at least, unsubstantiated) insinuation in this case is that any of these people leaked things to the press.
Last year I picked up a projector to put in our bedroom for movie viewing and gaming. One thing you want to consider if gaming is important to you is the latency of the projector. I ended up going with an Optoma GT1080[0] because I wanted something that was short throw for my layout and the latency (16ms) is quite good. Modern TV's are typically around 10ms to put that in perspective.

When the room is dark it's absolutely amazing, like being at the movies. When lights are on it is quite washed out. Still usable but not as enjoyable. Since the projector sits in my bedroom it's not much of an issue to always have the lights off but in a living room I can see that being a hassle.

Once you get the projector and screen (they do make a difference) I could have gotten several (cheaper) modern TV's but the experience of the projector is what I love. One thing as a new buyer I wish I knew was how much heat projectors can generate. My bedroom is fairly small and this thing can really heat the room up to sometimes an uncomfortable level after long viewing sessions.

[0] https://www.optoma.com/us/product/gt1080darbee/#
I don't see the relation to basic income. You could just say income and be correct.

I'm not sure how free money makes consumers a better judge of value, when the did nothing of value to get the free money.

In fact, behavioral finance studies have show that people use "mental accounting" and free money is seen as having little value.
And if they did have their cloud backup enabled and it copied over some photos taken for work then wouldn't they immediately be likely in breach of whatever NDA they signed?

Sounds like a lose-lose and I'm a strong believer in that if a company the size and as wealthy as big G wants a contractor to make use of a device to accomplish a task for them, they can provide the device and do what they will to it afterward and then re-purpose it for the next round of business. This isn't a new operational pattern, and I've never experienced otherwise. They don't need to buy new, just keep a supply of devices for contractors.
> I've been extremely skeptical of ARM EC2 instance types getting any sort of traction, as I don't believe most companies would bother to port their software to another architecture.

I think you miss a much bigger elephant in the room: Amazon is too small to get good offer when negotiating with fabs.

May sound weird to people from silicon valley.

Fabs, above all, like reliable clients with stable business because cashflow certainty is of vital importance in the fab business. Small orders are invariably very pricey, but so are big orders from companies that are "come and go" clients, whose own prospects and plans are uncertain.
so stop putting baby powder on my nuts during the summer? :(
I can suggest an experiment here. I just quickly searched "python rest" like you said and top 2 results are flask vs django. So yes, I agree with you, it's a crowded space.

However... both courses are several hours long. Personally I'm sufficiently proficient in python and would never spend 10h+ to watch these lectures, in 10h I have an api up and running. So maybe there's opportunity for a 1-2h quick course, designed for people who want a refresh or a gasp in a specific technology but they don't have to learn everything from 0.

Advantage on your side, you can create it faster, test faster if you like it and decide whether to invest further. Best of luck.
I might be a top 5% Firefox fan and I dislike Chrome. I'll still keep a Chromium instance around to test in when I do frontend work.

Luckily though if it works in Firefox then it usually[0] works in all other browsers as well.

[0]: While doing Android development I can remember once where it failed in Chrome but worked in Firefox.
Taxicab (taximeter/cabriolet), brunch (breakfast/lunch), spork (spoon/fork), Eurasia (Europe/Asia), Brexit (Britain/exit).
CBD is a single molecule (see https://en.wikipedia.org/wiki/Cannabidiol ). it doesn't matter where you get that molecule from, or if you synthesize it from raw chemical feedstocks.
I'm interested in hearing more about how you've configured your client, do you have a repo or anything? Have you included plugins or add-ins from outside sources?

Edit: Just saw your other comment, I'll check out your setup later this week!

I find that what I want out of a chat client is something that can easily idle in the background and beep at me if someone @'s my username, with a way to handle missed messages, but I've never really gotten irssi setup in a way that feels comfortable for that kind of flow. Something about the way IRC works seems to encourage me to just hop on if I have a question for a community, and then hop off when I'm done to avoid people trying to follow up with me while I'm not there. It's hard for me to imagine what the IRC experience looks like for the people who hang out there seemingly semi-permanently
I use it for my maker acquaintances.

been using it off and on for about 15 years.
You can turn it into biochar. The biochar contains a large part of the plant's carbon and is stable for a few millenia at least. The process is even exothermic. It is also good for the soil if you till it under.
contract brewing is huge. Usually it's used when a small brewery wins a national award (GABF Gold is a popular category) or if they want to start distributing outside of just the taproom.

http://www.sleepinggiantbrewing.com/ is an example of one such contract only business.
> The most serious allegation, according to Fagan, involved a temporary worker who suffered a cut to the head while a corporate audit team was inspecting the building. Instead of taking the injured worker to Amcare, managers attempted to hide the person from the auditors. By the time this person was treated, blood had collected into a golf ball-sized protrusion on the worker’s head.

Ooof.
I wonder where you host it? Every other hosting provider does not allow IRC servers, what a shame.
Read carefully.

The leaking was not explicitly blamed on the people that were fired.
Isn't that sorta what a unikernel is?
i use an xmpp server[1] as a hub for most of my coms. i run biboumi[2] which caches the messages (up to a limit) so i can read them whenever from any device. there are some interesting xmpp chat rooms too, but it isn't as popular as IRC i'd bet. i host family chats on my server. you used to be able to talk to OStatus servers over XMPP too.

there are some other servies like jmp.chat that i integrate with over xmpp for voip and sms.

[1]: https://ejabberd.im/
[2]: https://biboumi.louiz.org/
UPS and Fedex will also hold your package at one of their stores (or distribution center, but those tend to be a bit of a mess) and let you pick it up
Also I find worth considering:

- openbsd.org (because they do such good tech work, like OpenSSH and only 2 remote holes in the default install since ~ 1996), and

- http://batemanhornecenter.org doing research for CFS, an illness that is not well understood compared to the # of individuals affected. Biomarkers have been found, and they work toward better diagnostic tools, patient care, and physician training, including with government and others in the global research community.

- (edit) and maybe unitedway.org
sorry for the confusion. It was there until we recently redesigned our homepage to focus more on our creators and less on the features. We're planning to add an FAQ section on the homepage.
Show HN: Email notes to yourself, without logins and passwords
It feels a little cynical. You can enjoy beer and music and stuff without getting into a dick measuring contest. If all they want to do is one-up you then they’re not your friend. Find someone who listens to you.

If that’s their way of enjoying things, then what’s so bad about it? They presumably dislike a lot of the hobbies you enjoy, they’re not out there to ‘mentrify’ them. (Why this gendered insulting is okay when it’s aimed against men, I don’t know.)
I do like Firefox for political reasons, but the UI is pretty bad looking on macOS compared to Chrome or (especially) Safari.
This goes beyond "similar".
Congratulations on your announcement, I’ve been following you and Buy Me A Coffee for a while.

If I remember correctly, you got accepted to YC with a different idea — some sort of podcast app. Can you explain why you decided to pivot back to Buy Me A Coffee?
Volocopter has been making manned flights since 2016 (see links below). It has 18 rotors (at least 3 can fail while leaving it completely controllable) and 9 independent battery packs.

And, in particular, it doesn't have the people-decapitating and knee-cap-smashing rotors below the passenger capsule, but above (like a conventional helicopter).

https://www.youtube.com/watch?v=OazFiIhwAEs

https://www.youtube.com/watch?v=QhNJUyT3HI8
Shorting bonds is actually not so easy for a retail investor.
If I can find some time, maybe I will take a pass at it.
I rented a cheap ARM-based machine last year, just for running off-site monitoring from.

My monitoring application was written in golang, and that made cross-compilation trivial - although I guess I'd made a little extra-effort to keep it all native and avoid CGO.
To add on "who should decide who gets money" ... Let's not forget the equity capital markets and private lending institutions.

Banks don't have a strangle hold on providing capital.
I built email my notes based on my own use-case. Let me know if you find it helpful.