skysight-inc/HackerNews huggingface dataset:
> For Vault, this turns into a security issue due to a somewhat surprising feature of the Go XML decoder: The decoder silently ignores non XML content before and after the expected XML root.

I mean....Wow... I seriously wonder what the design consideration for the API of the XML decoder in Go was that they thought it was a good idea to simply ignore the stuff which is clearly invalid XML instead of erroring out. If I recall correctly it's even invalid XML to have a line break before the xml document declaration. But I guess in Go that would also be valid?

These are exactly the kind of gotcha's in API's and languages that create security issues like these.
> The script is a bit more complex than that as device names are not stable and various error conditions need to be taken into account

I always use /dev/disk/by-id/* .
TL;DR version:

splashmark [lots of options] search dolphin.jpg dolphin

will get a dolphin picture from Unsplash, resize and crop it, add EXIF tags, apply some filters, print attribution and title on the image and save it as 'dolphin.jpg'
Seattle Public Schools has maintained their TV station. I'm not familiar with it pre-covid but they were announcing broadcast material when schools closed https://twitter.com/SeaPubSchools/status/1245841000171479046...
Yeah, but take it from American point of view: you're purposely accepting life (and probably work) conditions that few Americans would accept willingly. So you're lowering their living standards and probably their average pay, because your negotiating power is really weak.

More than that, if you consider that the third world probably has 4-5 billion people, many of which would want to live in the US (~350 million people), this creates a scaling issue.

I'm not even American, but I can understand why they consider this a problem.
Mine has a line that runs to my garbage disposal, so normally no special cleaning is needed.
I haven't forgiven them for making me sign up to discover that "remote" means "remote, US-only", then making deleting my account a pain in the ass (you need a password for that - if you sign up using social SSO, you don't have one.)
We just replaced them all with cacti. There’s a dead one on the window sill in the living room I forgot to water that still looks pretty good!
Yes it will, making it even more complicated.

Signal integrity minimums for thunderbolt is more strict than USB3, and it is a bigger EMI issue, but at least the new standard mandates mandatory shielding.
Why Manually Tracking Open Source Components Is Futile
We don't put effort into things sooner because the effort and side-effects seem so terrible, but this is short-sighted thinking for an infestation that will become permanent.

Right now, those huge killer wasps from Asia are nesting in Washington State. There is a silly ineffective effort to track down the nest, as if there would be only one nest. That won't work, and the pests will eventually spread all across the Americas. We could solve it, at the cost of a short-term ecological mess. Simply dump pesticide from aircraft, covering a 100-mile diameter region, in quantity sufficient to kill every member of the order Hymenoptera. We won't do it, and so both North America and South America will eternally be infested.
This is why I'm such a big fan of good code completion. I don't need it that much in my main language, but when I use other languages every once in a while it's much much quicker than googling these things.
If you look very closely at some artifacts, you can even see what looks like marks of power tools. Small introduction of those artifacts and techniques: https://www.youtube.com/watch?v=BNSb5gPdqsA you can find more by searching "egyptian lathe".
if you want to zoom out much further try https://celestia.space/

my favorite feature is drawing the lines of the constellations joining the stars in 3D (they look all different from the other side!)
Debugging Kubernetes Applications on the Fly
This is amazing. Definitely something I will look at to relax when I feel stressed with this startup life.

Would also love to see a technical write up about how you implemented this. Great creative work!
There is really no reason to even allow style element in dompurify
This was discussed last week.

https://news.ycombinator.com/item?id=24636166
I noticed that as well with a fairly new dishwasher but I just assumed that is because new dishwashers generally optimize to use less heat and less water, so the way to achieve similar results in this 'eco' mode is to have longer programs.
https://github.com/dbalatero/VimMode.spoon

I think it uses an invisible neovim in the background when it can.
Benefits of Future Trends in App Development
I went there with my girlfriend about 5 years ago. We still laugh that it made us feel a bit unwell and had to leave.

Would still recommend.
The issue is one of representation and algorithms. For integers, you can provide a simple representation together with simple algorithms for addition, subtraction, multiplication, division with modulo, printing in decimal form, comparison which one is larger, etc.

For real numbers, we can come up with precise representations as well. Basically ASTs of permitted operations like addition, root of this polynomial, integral of this function, etc. If your set of permitted operations is large enough, you can represent any number that human language can encode. But operations on those representations are non-trivial.

Basically, for reals there is no representational space which is easy for "powerful" operations to navigate. For integers, there is the n-ary representation. But even that representation makes some operations non-trivial. What is the next larger prime number? What are a given integer's prime factors? Switching the representation to represent integers through their prime factors makes answering that question easier, but then suddenly other questions become non-trivial like addition of two numbers.

None of the two issues has anything to do with cantor.
> Browsers developed with vi-like modes built-in (vimprobable, vimb, qutebrowser) fared better for me, but then there's other issues like incompatibility or lack of plugins which keeps me from fully using them.

I've had this issue too with qutebrowser. I'm not very familiar with how these things work, but I wonder why plugins written for a given engine (say webkit) wouldn't work on all browsers using that engine. In the case of qutebrowser it uses chromium under the hood, so I would expect extensions that work on chromium to work on qutebrowser, just as most chromium limitations also apply to qutebrowser.
Note that most Frama-C analysis are not debugging tools. Although you can find bugs with them, they mostly focus on proving that there are no bugs, which is slightly different.

There are plugins for multi-thread programs.

One is an experimental plugin called Conc2Seq that I developed during my thesis with a focus on proving properties about small modules with a few functions accessing concurrently some global resources. Note however hat it is very experimental and it is not actively developed anymore, but at least it can be updated or give some ideas on how to write such an analyzer.

The second is a proprietary plugin called MThread (base on the Eva analysis of Frama-C), but it is only available via licensing.
Honest question: why are articles behind a paywall upvoted?
> Because a model that considers all computable real numbers would be similarly unintuitive, we should restrict ourselves to a smaller set that works in a more intuitive way. How should that set work is a HARD problem.

I'd argue that we actually have a pretty good answer: decimal floating point satisfies all three of your requirements.
It's not a direct relationship, but IMHO an indirect one.

Personally for me it is basically like this, that the Universe is so infinitely huge, somehow just calling it huge doesn't do it justice, wherein the concept of God or Gods as is defined by most Earth religions seems too tiny to describe an entity or a race of entities that could be the real God or Gods.

Moreover, even if the above mentioned entity or race of entities does exist, which created the Universe, I'm so infinitesimally tiny that they don't care about me, and certainly don't care about whether or not I pray to them.

In other words, the human concept of God or Gods is just one level above the humans. And, then if you add the fact that this one-level-above is also just a matter of faith and there is no evidence even of that, then the whole thing crumbles.

In other words, whether or not there is a God or Gods, has no bearing on me and my life and me and my life's decisions are not going to be bound by that.

Whether that is atheism, or being agnostic, or something else can be left undefined. It's more like, I don't care. It is simply that my life's decisions are not going to be in any way influenced by whether or not God or Gods exist, whatever the right word for that is.

BTW, the Hindu cosmology [0] does delve into such philosophical things, and perhaps my Hindu upbringing has something to do with my beliefs wherein asking such questions and pondering over them is allowed.

[0] https://en.wikipedia.org/wiki/Hindu_cosmology
You do better than gpt3 with fewer parameters if you can have the same or better performances over the amount of tasks gpt3 can do well. To test a general model like gpt3 against something that can address a single problem does not make sense.
Data parallelism is one of Python's most embarrassing shortcomings which is unlikely to be solved anytime soon.

This could be a big reason to switch!
All recent dishwashers I have own have had adjustable upper drawer so you can move it up or down a few centimeters depending on where your load requires extra height.
>I have been wondering if there is a way to satisfy law enforcement without breaking encryption or adding backdoors

I'd say "how about having law enforcement do, you know, police work to catch the bad guys?"

Police can already get warrants for just about anything -- as long as they can convince a judge they have probable cause[0] -- without too much of a hassle already.

Giving them keys to unlock everything is the wrong way to go about it.

Get enough evidence to convince a judge (not that hard) and you can get a warrant.

However, that doesn't mean anyone, even criminals, should be forced to make it easy for them.

Law enforcement obviously has way too much time on their hands, with the amount of lobbying they do to increase their ability to chip away at civil liberties and privacy.

Crazy thought: maybe they should use those resources to do real police work instead.

[0] https://www.law.cornell.edu/wex/probable_cause
Nice.

"in the course of the seventeenth century, many wealthy entrepreneurs preferred speculative trade and investments in credits and insurances to the efforts and risks of foreign trade. ‘In short, finance was... a lazy man’s way to make money." Much discussion of price-fixing and excessive premiums for insurance brokered in Rotterdam. They got too greedy and lost business to London.

The author credits marine insurance with influencing the growth of trade, but missed a crucial point - insurance made possible long-distance trading in boring, low-margin commodities. The author barely mentions what was being shipped. The Dutch became known as "Herring-tamers". The Dutch also innovated in cost accounting, to make sure the low-risk low-margin operations were profitable. Covered on HN at [1].

Related: "Against the Gods, the remarkable story of risk" (1998, Bernstein).[2] That, too, is a history of marine insurance, but covers more of the Lloyds of London view.
That book is clearer on the role of insurance in making boring businesses profitable.
Early shipping was focused on high-value cargoes, and voyages were referred to as "ventures". This is where the term "venture capital" comes from, as does the phrase "waiting for their ship to come in". Investors put in money for a voyage as a risky investment. The thesis mentions that in the pre-insurance era, people were buying shares in ships, and one investor had shares in 78 different ships. Note the similarity to the YCombinator business model.

(Yes, I'm getting bored enough to write this.)

[1] https://news.ycombinator.com/item?id=18761704

[2] https://www.amazon.com/Against-Gods-Remarkable-Story-Risk/dp...
It depends on the verification tool you use.

Eva (the abstract interpreter) has different ways to model dynamic allocation. It is thus a tradeoff to find between precision and computation time.

WP does not have dynamic allocation support. This is an ongoing work, but it will not be available in the next release. Note that there are different ways to model the behavior of dynamic allocation, generally via axiomatic definitions and/or ghosts.
Well MySQL has a history of ignoring the SQL standard even for the most simple things (even if those were defined before MySQL even existed), so it's not really surprising they got the TIME data type wrong as well.
I wish society were more sex-positive, stopped considering matters of sexuality or sexual activity to be so controversial, and stopped responding to them with such moral outrage to the point that your personal sexual activity could be considered something blackmail-worthy!

(I think this is a bigger problem in America than Europe.)

In either case, indeed, we need privacy (because other countries have terrible persecution around matters of mere sexuality) and as much maturity as we can muster when discussing it. I'm so proud of how mature this comment section is. Not a single giggling sexual joke in sight - at least here up at the top. Other sites would be riddled with it, with nothing serious discussed.
Don't forget that there are various big moneyed interests preying exactly on that fear and lack of knowledge - just recall how various "Internet blocking/censorship" efforts were marketed as means to fight spread of child pornography.

Despite actual groups fighting it as their main and sole mission were against.
My take on this as someone who's been on atomoxetine for a year is that, no, this won't automagically fix your problems.

But it gives you a chance.

Me on atomoxetine means I can actually: a) slow down, b) get an intuitive feel of passing time, c) tune out anxiety-inducing thoughts, which in combination are enough to get me through most days. Think of it as learning how to work again for the first time. Most people have had decades of practice on this and you're essentially starting from scratch. What would you do differently?
> Early Scandinavian Vikings were almost assuredly blonde, as their influence grew so did their genetic pool.

By the early Scandinavian Viking era, Germanic-speaking peoples had been carrying out raids to the east and southeast for centuries, and bringing back slaves. Even the earliest Vikings were not as “pure” a population as you imagine.
Earache: +Symptoms,+Causes,+Prevent+&+Treatments+-+Health+Lines
https://github.com/p12tic/xorg-xorgproto/commit/e3f4542bc58b...
The penis also lacks muscles (which do atrophy with lack of use). The more reputable reports from long-term wearers suggest that the plumbing still works even with near constant wear, provided that care is taken to ejaculate once in a while (e.g., monthly).

Because the purpose of male chastity devices is to prevent erections and orgasms, long-term wearers (who are a minority compared to the amount of folk who use such as device as a form of (prolonged) foreplay or as part of an erotic roleplaying scenario) may achieve such an ejaculation by means of a prostate massage (i.e., 'milking' him). The health goal here is mainly to keep the prostate healthy though.

Chafing, pinching, skin irritations; those are common health related issues though.

> and don't order some random cheap thing off AliExpress.

Or do, just to explore the different models cheaply, but treat them as novelty items. And yes, do read up on reviews, or ask in online communities. This is, quite emphatically, not a one-size-fits-all item.
Some people are wonderfully crazy.

This is the best kind of articles I hope to find here. Thanks!
Interesting, Postgres does this correctly:

https://dbfiddle.uk/?rdbms=postgres_12&fiddle=dc4ce40bd52695...
And I'd wary against generalizing from fictional evidence. As much as I love Star Trek, it has one hell of a anti-life-extension, anti-transhumanism bent. Perhaps because it's a story about humans becoming a better people, and for it to be directly relatable, it has to involve humans like us - unmodded, whether by genetics or technology.
SyncPlay + MPV is a nice open source way to go about it, sharing time control and synchronizing playback.

With youtube-dl installed, you can also stream YouTube together as well (Google Hangouts used to be about to do this before they purged all the integration features), not just local media files. But playing from local media files though helps save a lot of bandwidth when watching with friends with limited connectivity, or in prioritizing voice/video call quality.

There's also browser extensions such as Netflix party, or mobile apps such as Rave, but the first is still buggy, and the later is a bit sketchy.

Plex also has a watch together feature, so everyone can just stream from your own media server, no exchanging files beforehand, but only supports mobile platforms so far, looks like browser or PC support is still in the works.

Discord has been the best internet voice app I've found for movie watching, as the voice activated mics and background noise suppression improves the watching experience for everyone else considerably.

Anyone else have suggestions?
I'm not arguing that Chrome was not an upgrade from FF. I'm arguing that FF was arguably an even bigger upgrade from IE, and despite that, it had a slow progression.

To me, it seems hard to deny that advertising wasn't a key factor in Chrome's faster adoption.
There is no shortage. They just want geniuses for paltry wages.
A Tour of the Worm (1989)
Not relevant to my point, which is responding to "And who is going to monitor and enforce this? You?".

My comment is not arguing for or against the claim that the software should or shouldn't have whatever safeguards. It was extremely limited in its scope.

So, I'm not sure why you chose my comment to respond to with your "darkly hinting" comment mr. "apostacy".
How low is your bar for peace medal worthy efforts? If not starting wars is an achievement there’s a bloody long line of heads of state ready to receive one. And yes I do realize the bar was set low by the previous president.
thank you, i'm here all week. be sure to tip your server!
SGML itself has link process declarations, an additional type of declaration set that can appear in an SGML prolog next to DTDs and that can be used to remap elements (in SGML you can have multiple DTDs and LPDs, pipeline LPDs, and so on). sgmljs uses this and adds templating to capture attributes at call sites for passing these into templates as regular entities, allowing for parametric macro expansion. Basically, if you have eg

<div bla=x>

in your main doc, you can make SGML expand it using

<!DOCTYPE div SYSTEM [
<!ENTITY bla SYSTEM>
]>
<div>
<p>Value of bla is &bla</p>
</div>

honoring escaping/sanitizing etc. LPDs can apply rules in a context-dependent way using an automaton capturing much of core CSS.

Now, for arbitrary markup manipulation (XSLT is Turing-complete), don't tell the HN crowd that SGML has/had Scheme-based DSSSL (precursor of XSLT) ;) My opinion, having done large, nontrivial XSLT projects (including extracting the DTD grammar rules you see on the site from spec text) is that the more complex it gets, the more a general-purpose language with unit testing etc becomes a better choice over XSLT.

Edit: much luck with your browser project! Don't hesitate to use my code or ask questions (here or on StackOverflow tagged sgml)
Show HN: Mnist Is Overused
... even more, is the new model "so goddamn powerful" that it can't even be trusted with normal humans, and must be doled out (for money) a little bit at a time so that some normie doesn't accidentally create skynet?
but your average small startup still needs to hire people somehow, right? Is there still free workforce on the Market?
Compile and execute C scripts in one go
The very title of the page is „Code faster“. The there IS this sentence: To stay fast and healthy, keep your hands on your keyboard.

Together this says that you code faster by (or when?) avoiding the mouse.
https://sql-info.de/postgresql/postgres-gotchas.html

https://wiki.postgresql.org/wiki/Don't_Do_This
Centrifugal Force: Dancers Perform Implausible Bends on a Spinning Stage [video]
4) real freedoms for imaginary kids.
Youngest? Maybe, but the slickness of those pictures tells me that the real achievement comes from the parents who...nurtured...his inclinations.

IMO David Hahn's reactor is still more impressive. Kids these days can't even make a DIY superfund site properly...

https://harpers.org/archive/1998/11/the-radioactive-boy-scou...
MySQL wouldn't be in that situation if they had paid attention to the definition of the TIME (and INTERVAL) data types specified in the SQL standard long before MySQL was created
The whole series is pretty damn good so far, despite the use, bordering abuse, of emojis, but that's a personal take.

What other ML topics do you plan to cover, Simon?
Rarest Blood Group Bombay Blood Group and How It Is Discovered
In fact that would be

```
0 <= i <= n
```

As the loop reaches this value to terminate. Else, we could not deduce for example that `i = n` at the end of the loop (`0 <= i <= n && !(i < n)`).
Cash Cow Revisited. Gated Feature Release
Rails 1.0 was pretty much a fairly carbon copy of stuff like AOLServer, Zope and similar stacks.

I never got the point of Active Record amazement, having used similar teach like 5 years before Rails happened, we just weren't on Silicon Valley.
why would your comment be downvoted? do downvoters think you are lying, or do they think its a good thing that green cards take so long?

what you say is correct.

as a green card holder myself i can attest to both my initial approval period (3.5 years) and also the renewal period (2 years) being onerously long, and at times, having a particularly deleterious effect on my life.

look, i can understand the initial approval taking a long time. they have a lot of stuff to check.

but i applied for the renewal a full 18 months before my GC's expiration date (because i knew they took a looong time) and i received the card a full 2 years after my renewal + bio was accepted in the system, i.e. six months after my GC expired.
It's a lot more than "a few basic rules of the road". Why squander your attention budget on a numeric type with so many caveats and edge cases? What do you gain from it? If you actually need the performance of IEEE 754, then sure, use it, and have fun debugging all of the problems it has. But it's an extremely poor default for general-purpose programming.
No, it really isn't. If you have your masters you can immediately be granted PR. This is the case for all Indian nationals - however it is still lottery based. The point system you're talking about is for unskilled labour, and that still has the 5 year in the country+ language requirements.
A black hole containing all matter in the universe wouldn't be much denser than the current average density of the universe. Spacetime expanding sorta helps keep things from blowing apart.

It's an interesting factoid that blackhole mass isn't related to their volume but their surface area, so by adding mass they grow a lot faster than you'd expect and density goes down fast. Larger black holes are barely denser than water.
Algolia (YC W14) is hiring a Head of Support to help developers implement search
Apple/Intel Thunderbolt does not have this problem in my experience. USB has always been the cheapest alternative (remember Firewire?). Add to that the sheer incompetence of the USB committee (see the USB PD spec, or USB Audio) and its a miracle anything works at all.
Playing with Matches
I feel that you need a hydroponics setup instead