skysight-inc/HackerNews huggingface dataset:
Thank you for this comment, didn’t know he had been on Joe Rogan
Obviously the correct solution for SQL injection is to use prepared statements or "proper" input validation.

I however wouldn't call WAF solutions snake oil...Web security in general follows an approach of layering Swiss cheese with holes in them, you hope that if you layer enough protection you can plug all the holes.

Leading WAF solutions have pretty decent coverage for SQLi and other payload attacks. If you're not sure of security in your code then your next best choices is a WAF.
Lot's of potential. The world needs this innovation.
Who said it was the only thing?

Blink based browsers aren't faster across the board. They would be without Firefox developers working on performance.
There was a bug regarding the size of async functions growing exponentially in certain cases at some point, but it should have been fixed now.
From the GeForce software license:

"The SOFTWARE is not licensed for datacenter deployment, except that blockchain processing in a datacenter is permitted."

https://www.nvidia.com/en-us/drivers/geforce-license/

This doesn't preclude use in a workstation, but they don't want you building a DGX A100 competitor using RTX 3080 or 3090 cards.
And there are many services that will not allow you to create an account if you refuse to allow your email address to be shared. I believe one of those services is Zillow.
This is another reason it's entirely reasonable for people to be concerned about social attacks on software design pipelines (e.g. entryists making social demands on software developers). That sort of thing detracts from serious engineering concerns and can provide cover for weakening or undermining a standard.
Their reproduction strategy would have to change, when you produce 100,000 eggs and die taking care of them there’s not much chance to develop culture.
the appetite for a credible alternative to a Facebook project is strong. also the vue team has done a great job dripping out information over the past 2 years and building anticipation. very little surprises in this release, hence mostly celebration left. you need to go back a bit further in time to find the critical HN comments.
No, it should decrease. If you're a gazillion dollars deep, your best incentive is to cover up the fraud and try to dump it on someone else.
(Hyperconnected) Solitary Reading
personally I would look at holding about half your money in the market. 30%-50% in cash and by a 3x bull eft some at 20% down. some at 30% down. 40% down. etc.

you can even set it up with a limit order buy.

64.04 looks like recent peak for (SPXL).
Rochester Project Democratizes Access to Medieval English Literature
Man/Gal, that sucks! Keep your head up <3
For me, just the attention children need is enough to ensure I will pretty much not touch the computer outside of work hours. This does mean there are many things I won't be doing, but instead I spend invaluable time with my family.
Just because it's RISC-V doesn't mean it's open source. RISC-V is an open architecture so anyone can make an implementation but those implementations can be closed source. SiFive have released some open source stuff (https://github.com/sifive/freedom) but the majority of their work is closed source IP. In a way they're quite similar to arm.
ByteDance are being obstinate.

Ban the app, let a US clone reclaim the entire market.

Oh, and F the CCP.
It ultimately comes from a thousand years tradition that treats the unification of China as the highest political ideal.
Largely agreed. There's been some very dedicated people open sourcing support for RPi pieces, which is amazing to see, but it's been herculean efforts over many years with seemingly no support.

This is unfortunate & sad, but at least things have been moving forward. The much sadder story is wifi routers. OpenWRT used to have pretty broad support for a wide range of routers, but there have been less & less people making chipsets, and now you're probably getting either Broadcom or Qualcomm/Atheros. Broadcom has never been a "good" player in this space, but since 802.11ac routers started showing up over half a decade ago, the community has been unable to get a foothold in on Broadcom routers (I'm not sure if we have access to the bootloaders that we need, and I'm rather confident that we don't have access to open or closed drivers that we can use to run these Broadcom wifi routers).

It's frankly scary how controlled & inflexible the wifi router world is. This is further compounded by a general un-availability of add-on wifi cards: even though these chips are just PCIe devices, there's incredibly poor availability of things like PCIe cards & m.2 and mpcie cards one might add to a regular PC to make one's own wifi-router.

This is all to say, watching Broadcom has been really a scary, horrifying company to watch. The consumerization- the exclusion of the enthusiast & maker- has been very clear with Broadcom in specific, amid a market that's already shaky & at risk. The rich geeks keep fleeing to enterprise gear, the consumer keeps getting more and more stratified tiers of expensive consumer devices, and the ability to run our own networks keeps seemingly vanishing. And Broadcom is a colossus of a company that has obstructed & prevented the kind of healthy, resilient, community-powered growth that has lead to so much progress in every other sector of computing.

Leaving wifi-router discussion, I'm really hoping we start seeing more Broadcom SoC competitors show up with good offering, more single-board-computer offerings. Amlogic is doing very well with keeping upstream support, their S905X3 is a very nice chip. But the Cortex A55 core is not as powerful as the Broadcom's A73's, & there's not the dual-video out. Folks like MediaTek and Qualcomm have lots of good offerings, but no presence in the maker world. NXP does a pretty good job supporting makers, but usually at a high price point for somewhat aged cores. If you do want to investigate alternatives to RPi, this comparison of the Broadcom-based RPi4 vs an
Amlogic S905X3 Odroid-C4 is a decent starting point:

https://www.cnx-software.com/2020/04/24/raspberry-pi-4-vs-od...
Doesn't it being Python (any programming language - OpenSCAD/declaracad too) basically give you constraints for free?

I haven't actually played around with it yet, but surely it's just a matter of combining (or computing from) your (python) variables appropriately? And even having the ability to `assert x > 10` or whatever to validate allowable parameter ranges.
Jeff Geerling has some great and very detailed write ups on this.

To quote directly from his post: "The results really speak for themselves. For sequential operations, using a USB SSD is 3-4x faster than using a microSD card."[0]

[0] - https://www.jeffgeerling.com/blog/2020/im-booting-my-raspber...
[1] - https://www.jeffgeerling.com/blog/2020/fastest-usb-storage-o...
I think it's more that it divides up. One physical machine may serve 8 c5.xlarge, 4 c5.2xl, 2 c5.4xl, or 1 c5.8xl (so to speak, not necessarily this exact instance).

Would make sense to fit 2 c5.4xl alongside 4 more c5.2xl, for example.
As does Python, which drives me crazy. -V is version on Python.
Also reminiscent of the aptly named company "Fraud Guarantee":

https://www.law360.com/articles/1311477/giuliani-allies-char...
Three things: Bitcoin allowed malware authors to have a viable business model.

Technology isn't neutral. The world is too complicated to hide behind that argument. We must think about the consequences of the things we build.
It's a fun theory but "filtration efficiency" applies in both directions, including droplets you're spewing out. Trajectory would matter if the droplets were falling to the ground, but considering 1) the aerosolized droplets you're talking about linger in the air for 5-8 minutes, and 2) when talking, they don't travel further than 0.3m in >90% of cases[1], it really matters little.

To clarify, you said "With the cloth barrier, the droplets catch on the mask, or are deflected at an angle" -- I'm saying that "catch on the mask" is precisely the filtration efficiency noted above, and "deflected" doesn't matter if they're just hanging in the air for several minutes, <30cm from head level (even in the pre-covid days, I don't think it'd be socially acceptable to talk to someone within a foot of their head).

I'm not saying cloth masks don't help at all, just that they help very, very little. Consider that the filtration efficiency drops from the numbers in that table immediately after you start wearing it, and that it gets reduced a further 1-4x after you've washed it the first time[2], it's not really worth the effort, hence WHO discourages it.

[1]https://www.ncbi.nlm.nih.gov/pmc/articles/PMC2843952/

[2]https://www.koreascience.or.kr/article/JAKO201521839156288.p...
The author of that article also wrote an interesting book entitled "Born to Code in C" which deals with various small projects in C -- this interpreter, a text editor, a simple windowing system, etc. It is somewhat dated because it was targeting MS-DOS, but it was a fun read at the time.

https://openlibrary.org/works/OL720035W/Born_to_Code_in_C?ed...
Do they have independent testing that shows they work? At the rate of airflow in an office HVAC system they'd have to be very powerful lights.
indeed. React 16 celebrates its 3rd birthday next week. (https://reactjs.org/blog/2017/09/26/react-v16.0.html)
I will look forward to that then.
It's definitely better than holding a hospital ransom. It's very unlikely that anyone will die if you spread ransomware in a university.
That's a great observation. We chase the noise all the time, but what would happen if we let ourselves be bored instead?
Open CASCADE is the geometry kernel that does all the heavy lifting (all the geometry related operations and mathematics etc). FreeCAD is a primarily a user interface plus Python script bindings around this kernel. CadQuery implements a Python-based scripting DSL around Open CASCADE to let you build models using code.

File formats between these tools do not necessarily have to be compatible. Open CASCADE ships with exporters for a small number of common CAD file formats, STL being the one that is compatible with most other CAD tools. It also has it's own format for exporting just the geometry (.brep files), and the API provides storage facilities for building your own application-specific container formats (OCAF). I think FreeCAD uses OCAF to implement its native file format.

I know FreeCAD can import/export STL using Open CASCADE, so that's one way transfer models from/to other CAD tools, I would not be surprised of CadQuery can also do this (but I haven't used it so I can't say for sure).
I understand that the sales cycles are also long, even if you already have the warm connections ahead of time. The combination is pretty deadly, although this also offers a slight ray of hope as a real barrier to entry for the right type of service/product that can manage both.

There's always the option of going direct-to-consumer usually by targeting parents, but then that means you at some point might have to juggle two radically different marketing and onboarding channels.
Good ideas - for a while, before I had to switch it for work, I seperated work/fun by which OS I was on. Queue me picking up working on a new project and it changed that.
Yeah... no. Also definitely not the case. If I actually am remembering it correctly then it's probably from Fedora circa FC5 or Ubuntu circa 6.06. Back when I was in school and had never touched Linux other than on my own computer.
This is true for most topics. The way that math is taught, the way that history is taught- all separate the vast and deeply interconnected miracles of human ingenuity and achievement and discretize them into asynchronous packets of information to be tested on. How could you learn about Arabic numerals and Roman numerals without learning about how they slowly spread across Europe and revolutionized business? One without the other is boring. Every human invention is connected.

Some suggested things to look up, caveat that you may already know about a few of these-

- John Taylor Gatto and his myriad essays about the state and education (especially "The Six-Lesson Schoolteacher" as a Gatto primer)

- Buckminster Fuller's "Everything I Know" lecture series (transcripts are up somewhere)

- Anything Richard Feynman wrote
They are working on it, it's just not there yet. Quest 1 has a bit too low resolution for readable text. The hand tracking is fairly recent and not fully integrated. They are inventing pinching keyboards[1]. It's all moving in the direction of AR glasses to fully replace your phone. I think Apple is moving the other way, they will probably drive AR through iPhone.

The camera access is a huge privacy issue. I would also love to get access to cameras. It's in OpenXR standard, so we can hope they will implement it at some point.

That said, Quest is already useful for productivity. There's a modern browser, keyboard support (usb or bluetooth), Termux app that gives you capable posix shell, also apps for streaming your PC monitors.

I've built an in-VR live coding environment that I use to prototype and debug Lua 3D [2].There is also another environment by MrDoob [3]. I'm actually surprised how much Quest is open platform and usable as standalone headset. Very unhappy about FB account though.

[1] https://www.youtube.com/watch?v=2BV1lYp04vk
[2] https://twitter.com/j_miskov/status/1275135068282007555
[3] https://twitter.com/mrdoob/status/1304465880462643200
The bootloader with USB support was first marked "stable" on 2020-06-17. This post is about a firmware with USB boot support being released on the "critical" update channel, which Raspbian will install by default without any user intervention.
a CNC machine.

Also a blacksmith hammer.
In this context, the malware hackers are probably going to save lives in the future by setting a modern precedent for negligence at hospitals and it systems will be updated. Surely they should be patted on the back for such efforts?
Not neccesarily - I know tons of people happy they waited for GTA V on PC since they really took care to beef up graphics and work out bugs. PC gaming is at a huge high point in the last decade or so, thanks in large part to twitch.
still guilty of murder - so much for subtlety…

Again: Although there were a parliamentary investigations, there was no crime. No conviction, no indictment, no charges pressed.

300M € was what was spent on all external consultancies combined. The yearly Bundeswehr budget is 42 bln € [1]. 300M is < 1%.

In 2018, the big four (KPMG, PwC, EY and Deloitte) extracted 650M € from the 30 DAX companies alone. And that is just the auditor segment. This doesn't include the strategic consultancies, IT consultancies or Headhunters.

And it also doesn't include the consultancy subsidiaries of said DAX companies. Speaking of subsidiary consultancies: 2/3 of said 300M € "embazzled Bundeswehr money" were spent on it's own consultancy BDI.

This whole "Affair" just resides on general public resentment of the word "consultant" and the public's inability and unwillingness to calculate or research these numbers themself. Especially as soon as there is a "smoking gun" to find by focusing all efforts on looking the other way, which allows us to create a hoax like this.

[1] German: "Milliarde"
Me too, it is my laptop. I have started implementing laptop free time. Ie after 5pm, no laptop, Saturday no laptop. I find I am a lot happier and less anxious now.
I'd argue it's already happening, too.

In March and April, all I saw were Trump's worst moments- his blunders, his viciousness, his arrogance. My distaste for Trump heightened; I became more reactive and further triggered by his incompetence. Then, back in early June, every last thing I saw on TikTok was insane forms of rioting and the worst police brutality there was. TikTok effectively increases national attention to things like this.

The algorithm, of course, is reacting to my behavior- behavior which surely suggests that this is the type of content I "want" to see. If I go searching for basketball videos, I can teach the algorithm to populate my feed with them quite easily. But I never used the search bar.

The danger of the echo-chamber, rabbit hole aspect of the algorithm combined with TikTok potentially hand-selecting the types of content to push by default to American people to stir political dissension is very much there.
Isn’t that like saying that if someone burns down an abandoned building and accidentally kills the squatters living inside that they shouldn’t be prosecuted for man slaughter as well as arson?
Long sequences of genes not found in nature would be evidence that it is a lab-grown virus, but how could you prove that it is NOT a lab-grown virus? The absence of those genes doesn't prove that it wasn't made by a very clever lab.
You're not wrong - but try to Venmo somebody funds for a "Cuban Sandwich" or an "Iranian restaurant" and see what happens though.
That's a good start. Next up: twitter, facebook, instagram, ...
I traveled in Europe with a combo of an iPad Mini and, in some countries, a burner. It was a good choice at the end of the day.
the commerce department because they are not a legislature

The Commerce Department operates as a proxy for Congress. They were set up to fully codify and implement the broader regulations enacted by Congress.

Congress can't create a proxy that has the power to do things that the Congress itself doesn't have the power to do itself.

If you want to pretend that this isn't being done under the aegis of Congress but rather the Executive, you're going to have to point to me the enumerated power that gives that branch the power to regulate commerce at all.

They are not finding China / the apps guilty of a crime or punishing them for that crime.

That's the same legal silliness that our law enforcement folks like to use to justify asset forfeiture. I was under the impression that the consensus around here is that it's BS.
Thanks! Now looks like need to upgrade my TLS!
>-v, --invert-match

> Selected lines are those not matching any of the specified patterns.

For the lazy.

Edit: I don't know hackernews formatting and I'm among the lazy, so... Marked as "won't fix".
The real benefit from RTX will be on the game development side. A lot of games currently don't look that different with RTX off, because a lot of artist time goes into making sure that non-RTX (which are the majority of the player base by far) lighting/effects still look realistic.
The Marine Isotope Stages (MIS) [1] are based on the empirically derived LR04 Benthic Stack. We don't (yet) know how to model the termination triggers nor the precise magnitude of each glacial cycle but what this means in practice is that we don't understand why the system transitioned from 41 kyr cycles to 100 kyr cycles; the regular glacial cycles themselves are very real.

The "nobody knows" claim applies no more to the LR04/MIS evidence than it does to tectonic plate evidence. This is well established science not an arena to practice Hayekian "fatal conceit" dismissals.

[1] https://en.wikipedia.org/wiki/Marine_isotope_stage
I'm terms of injection you're 100% there. Parameterised queries are safe (unless there's a bug in the database itself).

It doesn't mean you're safe in other contexts though. For example if you allow reading another user's data without checking permissions, you've got an IDOR vulnerability. https://portswigger.net/web-security/access-control/idor
It is also worth reading earlier ones - I especially liked series about Sparta and earlier one about siege of Minas Tirith (yes, it makes sense).
I don't get why everyone is so negative about Nvidia Arm. Is it not possible that this leads to good competition in the datacenter, and pushing prices down generally?
How to Vote Your Favourite Among the Four Housemates in Big Brother
Pro tip: if you feeling smart, dig in your nose, works wonders.
Discussed at the time: https://news.ycombinator.com/item?id=14639967
Yes, you are absolutely right, we should absolutely do the thing that I manage to on the surface make sound very similar to what you just said but is actually the opposite. :)
The entire premise of the tool. There are developers who work full-time remote specifically to escape micro-managing aspects such as knowing exactly when you're sitting in your chair. Presumably you've built this for the other set of remote developers who are only working remotely because they have to, but really they want an office. This tool caters to the latter at the expense of the former.
'Trick' photons into behaving like electrons using a 'synthetic' magnetic field
By that measure, hijackers who shoot some passengers or crash an aircraft might 'save lives' by motivating the implementation of more rigorous security measures at an airport. I think this is patently absurd.
Being able to run a mainline kernel means being able to receive updates indefinitely, and being able to run any Linux derivative that you want, not just Android.

When I recommend hardware, I recommend hardware that will have a long life. Lately, recommending phones and tablets has been tough, because only certain manufacturers and models guarantee software updates, and then only for a small window of time. After that, you're expected to upgrade even if your phone or tablet works perfectly fine.

Hardware that can run a mainline kernel might change that, however.
You have to update it using an SD card?
Reddit.com on July 25th, 2005 – 1 month after launch
Germany just offered to invest $1.2 billion in LNG terminals if US allows them to continue with Nordstream 2.

https://oilprice.com/Latest-Energy-News/World-News/Germany-O...
Okay, so after 100s of millions of dollars we'll have:

Certified intrinsically safe (why not?) and fire resistant tablets with bluetooth and cell radios. We'll pay verizon to put up towers in the middle of nowhere. We'll redesign gloves to be touch sensitive. Redesign helmets to have bluetooth and speakers. Custom software all round. Etc.

After all said and done, we'll realize walkie talkies and paper maps are more reliable.
> I looked, and what I've found tells me that you make a false claim. Your lack of sources is just as telling.

God... so frustrating dealing with dumbasses that don't know even the most basic shit about energy production and cost. Not sure if you are just trolling. But here goes. Here are costs by different sources. https://en.wikipedia.org/wiki/Cost_of_electricity_by_source

Costs will vary between country. But here is cost e.g. for France. Nuclear EPR is 100 euro/MWh. Solar farms is 43.24 euro/MWh.

Next, the UK. Nuclear PWR is 93-121 pounds/MWh. Onshore wind 47-76 pounds/MWh. Solar 71-94 pounds/MWh.

How about the US. Advanced Nuclear 71-92 dollars/MWh. Onshore Wind 28 to 62 dollars/MWh. Solar 29 to 48 dollars/MWh.

Here are the estimates from British BEIS: https://www.carbonbrief.org/wind-and-solar-are-30-50-cheaper...

> Solar and wind power have their merits, but they are not the ultimate solution to clean power problem.

Said nobody ever. Solar and wind are dirty cheap hence any clean energy system will have to try to use as much of these as possible to save money where possible. We can supplement with geothermal, hydropower, biomass, power-to-gas, compress air storage, flow batteries, metal powder combustion, and even SMR with molten salt thermal energy storage.