skysight-inc/HackerNews huggingface dataset:
> Input sanitization is strictly checking front-end input against a ruleset and rejecting anything that does not comply.

That's validation. Sanitization involves altering the data to make it safe (comes from the word "sanitary").
3.0, no?
I think so, yes. For example, if you're including a Facebook button, that counts. So including JS from a CDN would also have to count. And when you're using a reverse proxy, I think it's not distinguishable anymore whether it's you personally collecting user behavior of whether it's Cloudflare doing it on your "behalf".
I love the web era where everything is about asserting expertise
Ammonia, produced using renewable energy, is one carbon-neutral fuel that might work for aviation. The Royal Society just produced a full report on green ammonia and its possible role in a carbon-neutral economy: https://royalsociety.org/-/media/policy/projects/green-ammon...
If you had to drive 30 mins round trip in the largest truck with the worst MPGs, you still wouldn’t be anywhere close to 90% of the meal.
Earth’s got a new ‘moon’ – here’s what to expect
No, that is escaping the input. The article recommendeds storing the text as-is and escaping (that is, converting it to HTML) when it's displayed.
The second time I took a flight, it was from Denver to San Francisco, to visit family. At that point, the nuclear family's itinerary had been Pennsylvania-DC-Ohio-Colorado. The uncle and aunt's itinerary had been Pennsylvania-New York-Kentucky-Texas-California. All this dispersal was managed by automobile.
Epidemiologists would point out things differently, but the bottom line is that US is not prepared.

Eric Feigl-Ding, Epidemiologist at Harvard pointed out:

- US has no free testing or treatment for population.

- US government does not cover any preventive measures for healthcare workers like China does.
No, the flu is still more dangerous. We're not talking about whether I have the choice of being infected with "this year's strain" or Covid-19. We're talking about risk assessment and realistic chances of catching them. The mortality rate of covid-19 outside Wuhan is 0.7% [1]. In the U.S. it's zero so far. I have a MUCH higher chance of getting influenza and dying where I and most people live. This could change and I certainly reserve the right to modify my preparedness and anxiety appropriately.

Alarmism and panic do far more harm in situations like this than the actual virus itself.

[1]https://www.marketwatch.com/story/coronavirus-update-79339-c...
The idea that we are in possession of special knowledge or rare insights is very compelling. This is especially true if we often find ourselves disbelieved or shown to be wrong on a regular basis, because it creates a justification for being marginalised. Ok those people might be clever, but I know things they don't so I'm still special. As a result people will consciously seek out unlikely connections or speculative ideas and latch on to them to try to get ahead of the pack.
> Raw materials are also not a problem

Knowing very little about the topic, I recently saw an article talking about how the first wave of wind turbine blades was starting to be decommissioned, and running into difficulties with what to do with them. While they're no longer useful on the tower, since they're designed to withstand incredible forces, it's difficult to destroy, recycle, or otherwise dispose of them, and indicated they're ending up in storage.

Do you happen to know more about this particular phenomenon and what the end game is for that? Granted, this is likely less of a concern than the waste that coal creates, or the long term storage of spent nuclear fuel. I'm just curious about it.
For those who have played Harvest Moon, it's basically the same game, but with more layers.
I feel like it’s weird that the article doesn’t mention this. Restaurants feel pressured to be on these apps so they just up their prices to make the 30% cut worth it and users just blame the app for the price discrepancy rather than the restaurant.
Space never ceases to amaze me. This is the first I've heard of temporary mini-moons.
Unless End of Moore’s Law is synonymous with the Rise of Accelerators?
Very excited to see this. Hasura has transformed how I build apps.
To be fair, glancing at the usages of red/blue pill in the script, they are using the term in an intuitive way; minus connotations as of late. Culture (some might argue a subset of culture, be it large or small) has just further defined and added connotations to the different kinds of "pillings." In a general sense, I would agree with you.
Netflix use IPFS? That's quite an endorsement and makes me take it a lot more seriously.
You can't compile the code of scripting languages, so please stop using that term. You may be doing something to the "source code", but it is not compiling! And I would argue that the thing you are doing to that code is never a good thing.
Stunning and brave
Last year was the first year I owned (and regularly used) a car, which made me think about mitigating my carbon footprint a little bit more seriously than paying the 'carbon tax' on my flights.

Like David says the offset projects all seem kind of snake-oil'y, so I looked for something that actually changes something in the world for the better. So far, building green infrastructure seems attractive, but I fear that in the end it just makes energy a little bit cheaper for people, and the real CO2 impact that happens in the transport and agriculture sectors doesn't really get solved.

I also was attracted to planting trees, since there's a very concrete impact there, that can't really be cheated against (unless people burn them down of course). So I started calculating how many trees to plant and it turns out that there's a lot of misleading info.

For example, in ideal conditions a tree might accumulate 20kg of CO2 in 40 years. My car did 16000km at about 1/14, on gasoline so that's 2742kg of CO2. So some website will tell me to plant 140 trees to compensate over 40 years, to compensate what I did in 1 year, assuming all those trees survive.

But they don't, only 55% lives, so I should plant 280 trees to be a bit more sure I really am compensating. And then it'll be compensated in 2060, which is useless because climate is changing now, not in 40 years. So it's better to compensate up front, so say I want to make sure I've made an impact by 2025, I should plant 8 times as many trees, so that's 2240 trees, and that's just assuming they grow linearly, which they probably don't do. And that they are planted in the tropics, which they probably aren't, and even if they were there's a risk they would be burned down for agriculture within the decade anyway.

And that's just me with an under average commute driving a mediocre car.

Does anyone have a better solution for offsetting carbon? Maybe we should pool money together and buy someone that's driving a range rover a tesla..
My first work encounter with Unix (SunOS, Solaris) had a weather phenomena naming scheme, "lightning", "thunder" and so on, all very exciting. When I and the other new hire called ours "overcast" and "mizzle", the older coders were nonplussed, but couldn't really complain about our sarcasm.
A small comparison:

https://www.moesif.com/blog/graphql/technical/Ways-To-Add-Gr...
The climate change debate is confused because a lot of people mix it with their own tangential and irrelevant issues. For example, broader environmental issues like plastic trash. If you're throwing carbon in a landfill and it doesn't decompose, it's not climate change. You may hate it, but it doesn't cause climate change, because that carbon went from being on the ground to being in the ground. And I'm not picking on the left and the green new deal crowed (where climate change is now a jobs, Healthcare and racial reconciliation issue as well). If you read right wing stuff, you'll notice the growing popularity of a sort of green fascism. Ie, people you didn't like immigrants before now have arguments telling us how you can't solve climate change without restricting immigration :rolleyes:

At the end of the day I see two inseparable requirements to solve it: new technologies which let us keep our standard of living without emitting carbon, and a cultural change to accept and desire low carbon substitutes. For example, EVs let you move around without emitting carbon, but they can't take off until people's attitudes towards ICE vehicles change to associate them with dirtyness. Or synthetic meat. It's very important that vegans put the idea that meat is not great, but they are going against super powerful millenia old traditions and so very good substitutes need to be available to help people overcome that.

Once you start running through the sources of carbon pollution and apply this, you get a pretty good idea of how to tackle the problem.
It’s not terribly worse than most major hubs in the area. The only one I would rate higher, more or less in the same range from US east coast (which I guess is the major market for hub-like traffic in LHR) is Schiphol, but that’s another sprawl that probably cannot grow much more. Munich is nice but it’s so much smaller and significantly further afar from the US. CDG is an utter dump. I don’t know about the Spanish options, maybe those could compete more actively, but maybe they’ve got their hands full with SouthAmerican traffic.
Common fallacy. Historically there has been a system of morals that has governed capitalism. Capitalism is about making a profit but also increasing the general welfare. The true capitalist dream is to make tons of money and bring forth great societal good. It's only now where the US has becoming increasingly amoral that we see the "late stage" capitalism we see today.
I have a box of custom ISA data acquisition boards sitting around somewhere, mostly because I never came around to throwing them out. I actually wrote a Linux driver for them some lifetimes ago. This USB thing might actually make them useful again. I never thought an adapter like this might exist.
But I believe that hackers already know this vulnerability, so it's better that everybody is aware of this issue so they can be prepared
A method I have generally found useful is to make a whitelist of safe characters (something like alphanumeric, comma, dot and space), and escape everything else. You might escape a bunch of stuff that technically didn't need escaping, but the method is simple, rock solid, and doesn't mangle anyone's names.
Mass surveillance is here already. This is about regulation and eventually consumption tax for cars.
Travis Scott AI Song
> There's also general health benefits of the added greenery consuming excess CO2.

Added greenery only consumes excess carbon dioxide if you harvest it and bury it in a very, very deep hole, where neither sun nor oxygen can reach it. Otherwise, it only briefly buffers some amount of carbon.
Isn't that the one that would require digging up the SS Richard Montgomery and its thousand tons of waterlogged explosives? https://en.wikipedia.org/wiki/SS_Richard_Montgomery
Ask HN: How do I help my Indian coworker get a raise?
I have an Indian colleague who is smart, articulate, and very technically capable. His work products are excellent, and he’s a delight to work with.

I recently learned that he has not gotten a raise in the time he has worked for our present employer, in spite of his increasing responsibility and consistent good results. When I probed him on why, and why he hasn’t been negotiating for one, he explained to me that he is dependent on our employer for his visa. My understanding is that it’s very challenging to both change jobs and stay in the USA under this visa due to the burden placed on the employer to get this visa.

Strategically, that puts him in a really bad negotiating position: ultimate leverage over your employer in this scenario stems from the threat (implied or not) that you might leave. This appears to be a trump card he doesn't have in his hand, as he wants to stay in the US.

What can I do to coach him to getting paid more? What sort of strategy can he use to show his value and demonstrate his leverage?
The situation is not good but not quite as dire as you claim. Roughly half of Americans get healthcare from their employer. And while “good insurance” is subjective, it looks like 75% of those people have deductibles under $2000. So not great, but not quite as horrible as “vast majority” imo.

https://www.nytimes.com/2019/09/25/health/employer-health-in...
Obama Pardoned a Guy Who Stole Charlie Sheen's Honus Wagner Card
Is there a procedure for when your face itches? Use your arm? Part of a shirt?
How much can we trust the data coming out of China?
> Ok back on track to positivity [...]

I'm not sure if you're aware or not, but going down that rabbit hole is the least positive thing you could have done (ok, I exaggerate but the point stands).

There's a saying in Arabic "if only" is the devil's work - it sometimes appears to be a positive or constructive thing but in reality, you're just digging yourself deeper into a depressing world view.

Don't focus on what could have been done differently: a) you can't do anything about it now, b) things rarely work out the way you'd think they would, so who knows how things could have gone wrong in that scenario.

Focus on the here and now. You seem to care tremendously about sustainability and the environment. Find a company working in battery tech or renewable energy (it doesn't have to be revolutionary, evolutionary improvements matter just as much, if not more so; e.g. improved Li-ion (LiFePO₄ or otherwise) today can save more species than NiFe or whatever batteries tomorrow) and apply. There are not just dozens of such opportunities, there are thousands - but you'll need to go out of your way to find them. Maybe you'll have to move (and move your family with you?) and maybe that's good for you.

Just do it.
No, the browser will decode &amp; in the HTML into the '&' character and will submit that character back to you if it is part of some form field.
The article refers to that as escaping output rather than sanitising input:

> And of course use your SQL engine’s parameterized query features so it properly escapes variables when building SQL:
How my company chose an accelerator program
> Explain to me how being appointed by someone makes you any less bias them being elected.

Because you generally don't need to be re-appointed. You generally do need to be re-elected.

In order to be re-elected you need to please the electorate, rather than do the 'right thing' (whatever that is.)

This can create a conflict of interest, such as judges prioritising 'being tough on crime' over the facts of cases.
Japan to close schools nationwide to control spread of virus
Live Chat with SalesForce Live Agent
Assumptions are testable, e.g. using game models. Such as Monopoly.

If you want as more accurate model, you can make one, e.g. mock markets. You can even evaluate then using various programmed strategies.

The problem is if your assumptions are completely invalid. Macroeconomy tends to use a few of those, especially based on workings of debt cycle. An almost correct descriptive model which when used as proscriptive causes ruin.
Likewise pure supply-demand models fail when applied in the real world.
1000 times this. Corosync and pacemaker alone are more or less as complex as K8S itself. Well, I'm exaggerating a bit but really, all the HA clusters that I saw, done with corosync in the past 10 years ended up failing anyway (and with fireworks!) one way or another.
Add this on top of Kubernetes? No, thanks. Life is stressful enough.
Let's come up with another term then. Maybe, Non-OSI-Approved open-source?

99% of our users love us and appreciate the fact that they have an alternative to Segment which lets them host it however way they want and keep complete ownership of their data AND to
modify the code to suit their needs and don't have to pay gazillions of dollars. Stopping projects like us from reaching out to them will not serve the OSS in the long run.

Look, we are a small project and no-body cares about us now - neither the OSI community nor the cloud service providers. The reason we picked SSPL was that it is much easier to go from SSPL to a less restrictive license if required than the other way around when we become big.
We can't but it doesn't matter anymore, the data from South Korea, Italy and Japan will be the most interesting for the next week or so.

Then I would imagine each country will be gathering a lot more data as it spreads further in another generation.
Why the negativity? Why the "OH FUCK YOU - FUCK YOU, IT EXISTS (author words)" tone when there are entire markets/areas where retro-compatibility and weird conversions are a requirement?

I know that an average user won't buy many of these adapters, but for a person doing that kind of research, is it really that weird? I mean, the author is a "Hardware / software necromancer, collector of Weird Stuff, maker of Death Generators."

We're retrofitting 18K devices with SSDs through a M2-to-USB converter (we have reasons to do it that way). Someone is selling my company 18K of those boards. So, not bad at all. And that's just us.
Doesn't the proximity of the M25 make it hard to enforce any emissions policy for traffic around Heathrow ?
I’ve only ever flown into Gatwick and it surprises me that they haven’t expanded it with the aim of taking more business from Heathrow. If you’re operating as a transit hub, it doesn’t matter that you’re a train ride away from London. The network effect must be really strong.
Django has had an automatic admin site since 2006 or earlier, this isn't a game changer for me.
> perhaps there is, or should be defined, a signal/noise Kolmogorov Complexity measure

This is studied in so-called algorithmic rate-distortion theory:

Rooij, S. de, & Vitanyi, P. (2012). Approximating Rate-Distortion Graphs of Individual Data: Experiments in Lossy Compression and Denoising. IEEE Transactions on Computers, 61(3), 395–407. https://doi.org/10.1109/TC.2011.25

Vereshchagin, N., & Vitányi, P. (2006). On Algorithmic Rate-Distortion Function. Information Theory, 2006 IEEE International Symposium On, 798–802.
Well just about none of them are substantiated with any data. You can say things like “people in the US will avoid going to the hospital because of the bill” and it sounds right because of our perception of the US health system, but is it really? Do we have actual numbers showing this is actually the case, and if so, how extensive it will be? And do we have reason to believe those numbers will hold in this exceptional circumstance? Yes, when people believe they might have the flu, they could potentially try and wait out going to the doctor. But do we believe that in an environment where we have people so acutely aware of the coronavirus outbreak that they are buying out supplies of masks, posting long twitter screeds on potential doomsday scenarios, and side-eyeing every Asian-American with a cough, that when they start to show symptoms they still are going to get hung up on the cost of a clinic visit?

The same goes for many of the other assertions, such as parents forcing their children to go school sick. Or the extremely thin premise of elderly people dying because of a huge number of parents sticking them with their sick children while they work. In fact, what data we do have seems to suggest that children barely get sick from this thing at all, or their sickness is so mild it doesn’t get diagnosed. A recent paper in JAMA found that of the first 44,672 cases confirmed in China, only 416 were in children younger than 10. In fact, only 10% were in people younger than 30.[0] It seems ridiculous to entertain scenarios where elderly people all die off because overworked parents foist their parental duties onto them.

It’s also worth stating that a lot of these concerns are not unique to the US. Many of them also apply to other countries like China and Japan, which are already in the midst of their outbreak. Yes, author is only comparing the US and Europe, but that seems like a useless comparison given that the number of infections in both regions is so small and contained right now.

And finally, the author fails to account for reasons why the US might be better off than Europe. As is often pointed out on this site, usually in a negative context, the US is far less dense than Europe. Fewer people are living in tightly packed urban communities, and more live in suburban and rural areas. Far fewer rely on public transportation. That means far fewer opportunities to come across someone contagious. And the US has some measure of protection in its borders. Except for Canada and Mexico, we can only be accessed via plane or boat. Most of the EU has open borders, meaning that it will only be that much more difficult to coordinate quarantines and control measures.

[0] https://jamanetwork.com/journals/jama/fullarticle/2762130?gu...
Climate change is happening because this is not a static climate, but now its used as the universal excuse to strip and deny human rights. That is the real goal of the green movement. Cleaning up earth is now their weapon for dominating us and not an actual goal. Depopulation and control are the stated goals.
> turned out it was SSPL/Commons Clause/BSL

Would I mind though? An open source project I work on uses an older version of MongoDB. The question about SSPL has, of course, come up. And to our knowledge, it'd be functionally impossible for SSPL to be an issue for our project, it's users (commercial or not), and any forks that could come from our project (commercial or not). The terms of SSPL are so specific that they're harmless to anyone but AWS. Heck, even AWS could use our project with a newer version of MongoDB, and still not run afoul of SSPL!

Nonetheless, people are concerned that depending on something a non-OSI-approved license would turn people off to the project. Not for any actual term in the SSPL, just the OSI's gatekeeping. That's a failure of the OSI and the trust we've placed in them.

> The OSI does not gather up lawyers.

Sounds like the OSI isn't capable of doing the job they've been granted then. They absolutely can have a chat with people and try to find a way to make an OSI approvable license that meets business needs for open source businesses. You are stuck on the process they currently have decided is theirs, and ignoring the fact that that process is not working, and open source projects and companies are hurting because of their inaction.

Now, their position seems to be "we don't have to, because it's not our problem if open source businesses are non-viable". And that's remarkably short-sighted, and a complete travesty for the community.

Not sure why you'd call my opinion a "threat", or even "pressure", beyond me communicating my displeasure that the OSI is entrusted to a role I don't think they've achieving. This is a discussion forum, and I'm hoping I can convince you to rethink your position, or at least recognize that the OSI has some room for improvement in this area.
It's symptoms are pneumonia-like and it mainly kills the elderly. Is this is a new strain of pneumonia? If so, this seems like an overreaction?

Edit:

Not sure what the downvotes are about. I asked a question. So you can't fight it with drugs, it's highly contagious, hard to initially detect, its long-term effects are unknown, most have recovered and it's largely fatal to the elderly or those with existing conditions.
I mean, the footer just screams "This blog is the next Zero Hedge":

> Unlike our adversaries including the Integrity Initiative, the 77th Brigade, Bellingcat, the Atlantic Council and hundreds of other warmongering propaganda operations, this blog has no source of state, corporate or institutional finance whatsoever.