skysight-inc/HackerNews huggingface dataset:
> 2 weeks of water and about the same of food

Everyone keeps saying that, but what does it mean? What food did you buy, and how much water? I can't get a handle on how much that is. I'm not panicing, at all, I just want to have enough when everyone ELSE panics.

I also hate the thought of boredom, so I'm trying every canned fish I can to see what I like, so I at least have some variety and flavour for those two weeks.
> I'm one of those sellers who is being forced into Etsy's new ad program.

How are you being forced?
What impact do you think there's going to be five years from now?
> Because STL is part of the compiler, guaranteed to work on every platform supported by the compiler

No it isn't and no it's not. There are even platforms where an STL isn't even provided out of the box, you have to pick one. And there's quite a few at that - libc++, libstdc++, stlport, etc...

But clang, g++, etc... they don't care. To them it's just another library you're linking against, no different from any other dependency. They don't provide it, they don't care. It can even be quite a pain in the ass to use the "native" STL of a given compiler, like trying to use libc++ with Clang on most Linux distros.
I wasn’t just basing my comment off his responses to me, his tone was similar through this thread and on the Github issue tracker as well (I later saw others have commented on it too). But it’s possible that’s just his writing style and we are reading too much into it and if that’s the case then I’m sorry for doing so.

Regarding the link point. I don’t agree. If you purposely post a promotional link saying “use my tool” to a specific forum then you can’t really backtrack and say “you’re not my intended audience for this page” when people raise questions based on incomplete information published to that link. That’s just bad product advertising. Or at the very least, you should add a disclaimer saying “this is normally a manager link (etc)”.

As it happens, I am actually the target audience for that landing page because I am a tech lead responsible for making architecture-based decisions and the number of HTTP end points we have is few because that’s not the main side of our business (so certs often get forgotten about). That’s why I was asking the questions I was asking.
The Gain/Loss posts on that sub are surreal. There's a guy that made 500k with 12k in two weeks with a series of daily bets that is off the charts.
All things considered it is not VSCode faults for following git standard usage, but this does not mean that it was not a user hostile functionality. This is essentially git fault as `git checkout` is a dark and evil command.

Whether we have normalized low standard for usability is irrelevant.
I'm curious whether the Rome authors devote attention to 'compatibility' with the principles and requirements of build systems like Buck (and Bazel). Our company is in the process of migrating a large Typescript codebase to Bazel, and there's a non-negligible amount of reconfiguring and re-tooling that needs to be done that would be less necessary if key ecosystem components were designed early to be hermetic, deterministic, modular, and incremental.

Edit: Facebook wrote Buck and uses it extensively internally, so there being a desire for compatibility doesn’t seem far-fetched.
I'm the developer of a language that I think is in the target audience of MLIR: https://futhark-lang.org

I'm still not completely certain MLIR addresses the difficulties I face, which is exactly to design the specific IR that can express the passes I need. Having outside constraints seems like it would just make this work harder, and I'm not sold that the reusable components offered by MLIR offset this. At some point I probably will try generating MLIR from the compiler midend, though, just to see whether it might be a good idea.

The thing that concerns me the most might be that using MLIR seems to require writing your compiler in C++. LLVM can be accessed by non-C++ languages just fine, because it's just a consumer of bytecode, but the whole point of MLIR is for the IR to be extensible, and that will presumably require custom C++ to introduce the desired bespoke structures. In comparison, it's rare that a compiler needs custom LLVM passes.
Apologies - I was too hasty, knee-jerk reaction to the overloaded word "task"; yours are features.

Your real limitation here is Trello. With other tools (or just a whiteboard, often a good option) you'd put your bigger features into horizontal swimlanes, and you'd take care never to have more than a manageable number of those in progress at any time. Finding stuff isn't hard therefore.

Turning it inside-out as you've done here is clever. The tradeoff is the focus on a limited about of work in progress, and with that, focus on completion. So you'll need to find ways to review the equivalent of right to left, most complete first.
> selling order flow data to hft and market making hedge funds but I don't think those funds execute the orders themselves

The order flow data is worthless (because the orders come from uninformed traders) the value is in filling them without the risk of being shortchanged (because the orders come from uninformed traders).
I feel like that's a hard problem that exceeds hiring these days, would love an answer to that as well. My personal approach for junior positions has mostly been to hire rather selectively (when I can) to get people that at least recognize when they might lack knowledge in a certain area, team them up during the onboarding period and somewhat strict code review policies at least in the beginning.

Avoiding stipulating this training to all new hires is a symptom of me having an aversion to most classroom settings though, I've had quite a few developers that enjoyed getting this style of training after they indicated they wanted it down the road. I personally wouldn't have enjoyed the 90% retraining scenario (monetary loss that implies aside). I've found training on specific aspects with a bit of practical engagement to be more effective, e.g. there are great and engaging courses to transport basic web security. Not that these are always up to date or trainees retain everything but it gets them into the right mindset to be aware of issues.

But of course even with an approach that works 100% of the time, these days that doesn't guarantee that none of your dependencies or outsourced code production is up to the same standard.

tl;dr is "I don't know either" I guess but maybe you can take something away from it.
Sentiment analysis is not new, and I would imagine it's ancillary at best to a proper trading outfit. Well equipped market makers and HFTs make money on price movement (and exchange rebates). A flurry of out-of-the-money calls is unlikely to adjust an underlying equity price significantly enough to be statistically important.
This. I'm tired of people implying or right out stating that SQL injection is an input validation problem. Why couldn't you have foo' OR 1=1; as a title of your post? It is all good characters as far as text entry is concerned.

SQL injection is really a problem of how you pass parameters to your SQL layer. Parametrized queries are the (easy and widely available) solution. If you are concatenating input to your SQL queries, you're doing it wrong.
Saw your overview video, very interesting indeed. Are you guys planning to release a self-hosted option? Low code & auto-gen forms are key for my use-case.
Best Product Managers Remove Uncertainties. Here’s Why
The state backs up your right to personal property with violence too. Your stuff is only your stuff we decided it is a right and have our state enforce that right.
> That's crazy. Etsy is not the market, it is a market. If you don't like it, you move somewhere else.

Sufficiently big _a_ thing becomes _the_ thing because of economies of scale, network effects and "the software is eating the world" effects.

See Google, Paypal, Microsoft, Facebook, Twitter, and so on.
There are other projects like create-react-app that already do that.

Rome is a bet that by integrating disparate systems that need to perform many overlapping tasks, you can make a better whole.
Show HN: First dating website for people into Financial Independence
Hi folks!

I am interested in the topic of Financial Independence and Early Retirement (FIRE). I visited various meetups and noticed that many people in the scene struggle with romantic relationships. Thus, I decided to create a niche dating website - https://firedating.me/.

Technologies & tools used:
Django with PostgreSQL on 5 USD Linode
Ansible scripts for deployment
Emails - Amazon SES
Inkscape for design
Synfig for logo animation for ProductHunt

So far it is a hobby. The website is free and I don’t think I will be able to monetize it. However, this is not my main goal - I enjoy that others just find it useful. I have a group of people interested with whom I discuss my ideas and plans. I treat this as a learning experience. Overall I paid 2.7 EUR for the domain (namecheap discount) and 9.82 EUR for Linode server. Pretty cheap, but I spent ~55 hours working on this.
There's no suggestion that you do and the abstract says "commodity" routers.
> "Using the "+" operator with two string constants gives a weird compiler error about adding pointers?"

He'd have that in C too, and that's the expected behaviour. What he would want is:

#define STRING1 "hello"
#define STRING2 "world"
const char* gString = STRING1 " " STRING2 "!\n";
#include <stdio.h>
int main() {printf(gString); return 0x0;}
Hold on -- this sentence could essentially describe Webpack. The only difference is that you plug your own transpiler and linter into webpack. It sounds like Rome will let you integrate external tools, so what is Rome really? A webpack that ships with a default linter and transpiler? There must be more to it than that, otherwise I don't see the value add.
The test that cost thousands of dollars in your article was the routine diagnostic test for the flu. It didn't cost thousands of dollars because it was for the coronavirus, it cost thousands of dollars because it was done in an emergency room.
The first link 404s.
Me, by summarizing my findings when I browse internet and following my instinct to what can be interesting for the readers. Also I have planned some special editions like gaming, going 100% open source, ecology, education and so on...

I'm open to any suggestion (as long as it's not a disguised ad) either by opening an issue: https://gitlab.com/bloom42/open_source_weekly

Or sending me an email: https://opensourceweekly.org/about/
https://dealbook.nytimes.com/2012/03/05/venture-capitalist-p...

He was so right about facebook and microsoft back in 2012
There was article yesterday that one of cruise passenger coming back to USA felt weak and had fewer, but Miami Hospital told him it will cost $3,700 to test his blood. He went home without testing and 3 days later came back with positive result for cornv-19. so much for “best healthcare” if you can’t afford it.
rotfl ! spot on !
(or they may check it for whatever trending corona virus)
author's tweets about its history - https://twitter.com/sebmck/status/1108407803545214977
You can't sanitize for output at input time, as the sanitization that needs to be applied is different for HTML, JS and JSON. You don't know that at input time.
Paywalled site, T$DR.
The approach is currently a design draft to approach credential rotation from a generic perspective. It spans over a couple of components and we need to identify first on which level we want to address the requirement of credentials rotation. So it will take a bit until we have a more clear picture.
The license one was opened nearly 6 years ago.
Do you plan to self-host at some point, and get rid of the dependency on the (external) TS compiler?
That's the history of syphilis if i understand correctly. It started out as a serious plague that covered its host in oozing sores and killed them in a couple months, now its symptoms are much less severe and it kills in a matter of decades.
The Bull and Bear Case for Investing in the Top Cryptocurrencies
So the SMS message I send from my service would look like this?

Alert: Bob &amp; Jane O&apos;Brien just commented on your recent post

If you store HTML in your database, now you have to convert from that to whatever you're outputting to later. And you haven't covered the dangerous characters for other contexts.

Just store whatever the user sent you. When outputting to various formats, convert accordingly.
People have been doing this pretty much since Google existed.
Something Is Causing Our Eyeballs to Elongate
Network topology design at 27,000 km/hr
One point I haven't seen covered yet is split-horizon DNS where there are actually servers listening on both sides of the horizon (though possibly different ones).

Example #1: I have a personal server running at home that is reachable from the internet through a PageKite tunnel. It's reachable through a public address of the form https://xyz.pagekite.me. The connection is secured by a Let's Encrypt certificate, which means I have to use this address to avoid HTTPS errors and the domain has to be reachable from the internet so I can fulfill challenges.

However, I'd also like to access the server from my LAN without an unnecessary round-trip through the internet: I might want to avoid unnecessary data costs or display certain content only available to LAN clients. So from the internet, the domain should resolve to the PageKite tunnel, but inside the LAN, the domain should resolve directly to the server's LAN address.

This is relatively easy to accomplish using traditional DNS: Just set up a local DNS server that serves the LAN address. However, how do you do that with DoH?

Example #2: You want to set up an internet router at home. The instructions ask you to connect to www.routerlogin.net to pull up the web interface. The domain is split-horizon: When requested through the router, it will resolve to the router's internal address and be served by the router's internal web server. When requested from the internet, it will point to a generic info page from the vendor.

Now with DoH, you'd always see the generic info page, even when connecting through the router.
Code should ideally be correct and fail-safe; deal gracefully with bad input, ensure correct output, at all levels. Ideally.

That still doesn't mean you should care about output sanitization on data entry, as you don't know how it will be output yet.
According to one of those graphs it has a 50% fatality rate? Seems a little surprising.
Not trying to be mean, but stopped reading after "based on the Chinese CCDC's report".
Huh? During the LA riots, Korean shopkeepers were successful in using guns to deter rioters from looting their businesses.
They refer mostly to how globals and constants maintain use lists as linked lists, which is indeed a nightmare for synchronization. And yes, fixing that would require some difficult surgery.

But let's be honest about what is more work: refactoring that, or rewriting all users of LLVM out there. My bet is on the first one being cheaper by at least three orders of magnitude.
I have no idea why you're being downvoted. Have people forgotten how to exercise without gyms?
I think taken to this logical extreme, the only conclusion you can come to is that they value having people from more expensive areas. I mean, from a business perspective, it seems insane to hire anybody from SV if you can fill your roster with equivalent people from poorer areas. Some areas are absolutely chock full of experienced developers used to working for a tenth of the salary that a SV developer can demand. So why would any rational company choose to pay up to 10 times more than they have to for workers?

I think the obvious reason is because there is more to having a high tech worker than the work they produce. Remember that Gitlabs is still a VC backed company. In addition they still have to exit sometime to pay back all those VC investors. As much as I hate to say it, a startup staffed by people from eastern Europe or south east Asia doesn't have anywhere near the cache of a startup staffed from people in SV.

Right now Gitlabs has paying customers, but it's important to understand that its bottom line could depend as much on their investors (and potential investors) than its sales. Not only that, but the buzz you generate from being a SV startup leads to other SV startups using your service.

How many companies would (very unfortunately) give Gitlab a pass if it was staffed entirely out of India? I'm extremely sorry to say that I think it would be quite a few.

So, as terrible as I think it sounds (especially as a developer who works out of rural Japan), I can completely see the value of paying more for developers from certain areas. SF, LA, New York, London, Paris and even Tokyo are just much more impressive places for your staff to live than We-don't-even-have-a-train kuso-inaka Japan.
Few years ago I replaced my Ipod's broken hard drive with a compactflash card using a strange adapter, it works great.
The American president is railing against news organizations that are paying attention to the outbreak.
> “Moving from”? That happened decades ago, before e-commerce became significant.

Yes, absolutely, since the invention of brands, at least some brands were the product rather than a signifier of quality.

However, in the last 10-20 years, largely due to globalization, high quality goods have become widely available. Before, that Nike hat may well have been much higher quality than the generic, but now they are indistinguishable. As overall product quality has improved, the only thing left to sell is the brand itself.
Why business is so difficult and unpredictable
There is a nice book by a convict who used his time in jail to exercise using whatever available, a very inspiring read. The title is Convict Conditioning.
I applied as well, got rejected, and asked for feedback. I did get it, but it was not very actionable. Then again, the person who provided me the feedback just copied over the notes from the one person who did the interviewing, so this is probably somewhat hit-or-miss too: you just have to be lucky who interviews you. Which is not just the case for getting feedback, but also for getting the job, I suppose.
Welcome Lichess Boards – A new way to play on Lichess
Everything should have an adapter to connect back to RS232
Is it just me, or are none of the images loading on twitter?

Edit: they loaded in the end, it was just very slow
OpenBSD Pwned, Patched Again: OpenSMTPD Bug Is Remotely Exploitable
another data point:

0% management fee

20% carry

https://magic.do
Well, use libraries/frameworks that ENFORCE you to sanitize and makes that exceptional case to output raw content.

Examples.
PHP: Using mysql_escape_string is a no-no - you will forget to add it one day. Using parametrized queries you won't write unsafe SQL.

.NET Core - Outputting to HTML by default only outputs those chars to HTML which are in predefined UTF range. All other chars will be converted to HTML entities. If you want to output raw, you must explicitly use @Html.Raw https://docs.microsoft.com/en-us/aspnet/core/mvc/views/razor...
There's lots of examples, but a famous one is this video by Sethbling where he uses a controller as opposed to a TAS tool: https://youtu.be/hB6eY73sLV0
I laughed inside. I mean cried...
If we didn't clean up the garbage and prevent the graffiti, the ancient historical garbage and graffiti wouldn't be rare, so it would be much more boring to future archæologists!
> BUT IF ONE USES END-TO-END ENCRYPTION, ONE CAN'T ACCESS MESSAGES ON ANOTHER DEVICE, BY DEFINITION!!!!!

You can encrypt each message separately for each device, that's still end-to-end encryption.
no data for Israel ?
> If you use deaths/(deaths+recoveries) you get a much higher figure

You also have to take into account that mild cases are probably never detected and counted. So you are calculating the fraction of deaths among severe cases, not among all cases.
CSS art always reminds me to the acid tests, back in the old days.
We come from far! https://en.wikipedia.org/wiki/Acid2
> It’s obvious your motivation is

Oh, fuck off. It's obvious from your username that you're simply into watching people drown alive as their lungs fill with liquid, and furthermore a simple character count + tea leaf analysis shows you pooped on a pigeon yesteday at 4 pm, while praying to Satan for SARS2 to wipe humanity away. Any attempt to deny it would just prove it further, if further proof were even possible at this point of 100% proof.

> whether that’s for financial gain or to demonize Chinese/Asian people is hard to tell

I love how you add this as if to offset you just making an authoritative claim about the inner motivations of a person you haven't spoken a word with in your life. How very fucking scientific.
I am a theoretical computer scientist. I can appreciate the insightfulness (on the surface) of that commentary.

However, the fact that modern computers can be exploited due to architectural and engineering decisions (eg memory unsafety) does not mean a separation between code and data is not possible.

In fact, it is precisely a hot topic how to cheaply bend current practices back to that model given the rampant amount of vulnerabilities in the wild.
Generally I try to sanitize the input and store the original raw value in case we find sanitation bugs.

I'd prefer fixing the old data when needed to having overhead on every read, at least for FastComments...
> Hence selection pressures will skew it towards “Antibody resistant, lower fatality”

That is pressure on the humans. All the humans that will die easily will die and all the survivors will be the more resistant ones.

The virus itself does not behave strategically. Species, other than humans, have no particular ability to plan how they evolve. The only pressures on the virus itself are for longer incubation times, faster ability to spread and the ability to reinfect people. Even if it could strategise there is no particular pressure on the virus whether it kills its host or not as long as it gets passed on to a few people in excess of the original host.
Those who have lived through a failed state know that no amount of personal fire-power will protect you from a ruling-party politician with the local constabulary in his pocket.

But if it makes you feel better…
Base24 is already the name of a pretty old payment processing standard: https://en.m.wikipedia.org/wiki/BASE24
Toyota Prepares to Build New Energy Plant in China – Pandaily
People stay home when they feel like crap. I bet parent comment is right that severe symptoms are selected against.
A Solid RealWorld Demo Comparison
Some of them could be from just about anywhere, anytime. In an age of HD video being the norm for even consumers, grainy footage that then ALSO doesn't have a source or date and is posted by anonymous people on social media? Just no.
This suggests an interesting tactic to build public support for mass surveillance. Don't do it it secret, but also don't talk about monitoring individual behavior. Instead, make it about regulating the service provider.

"We need all your GMail so we can fine Google for failed deliveries and spam" is a much better story than "We need all your GMail to make sure you're not a terrorist" but of course the effect is the same.
Creating a PostgreSQL Procedural Language – Part 3 – Executing User Code
Any examples you could share? I'm familiar with kind, Minikube etc. but would really like something persistent and maybe even publicly accessible (for staging environments).
Advertising agency's website suspended by US Department of Homeland Security
I think this probably means that Iran isn't identifying all the cases, not that they actually have a 16% fatality rate.