skysight-inc/HackerNews huggingface dataset:
Honestly I don't really know how to summarize it. Django templates have a ton of gotchas. They have the dumbest safeguards, too, such as preventing you from using variables beginning with underscores.

Jinja templates at least let you use normal python syntax in the tags. You can easily do something like {{ items.filter("books")[:5] }} — in Django, you would have to write a special accessor or template tag to call filter("books") as it doesn't let you specify arguments to function calls, and you'd use the awful |slice:":5" to slice it.

But more than anything else, Django templates are not just untyped, they are untypeable. You can't really validate them. Best you can do is try to compile them in a CI job see if anything fails. Not to mention that the way you're outputting HTML essentially arbitrarily anywhere in the page means there is no way for the editor / tools / even yourself to know if some piece of code is syntactically or semantically valid in context. Got a list_item.html with a naked "<li>{{ item }}" inside? Why the fuck not! Could even be raw css or js outside a tag in your template, could be valid in some includes, invalid in some others. Everything goes. You can't even know whether a template is in use, as it's completely arbitrary code that calls these template inclusions, via string filenames (which therefore can be included however you want).

It's impossible to create these problems with react/typescript. And react heavily encourages code reuse: creating reusable components that are as small as possible. Django templates encourage copy-pasting.
Only because optical heart rate sensors aren't very accurate under many real world conditions that have nothing to do with the quality of the sensors, other hardware, or the software. There's a good long history of medical research here, and not a lot of reason to believe that someone is going to develop a medically useful wrist strap based optical sensor.
Nitpick: Its Gell-Mann amnesia, Michael Chrichton's name for Murray Gell-Mann's amnesiatic behavior, not an effect discovered or promoted by Gell-Mann.
Yes, Deno uses it as its internal event loop for JS code.
I gave up and just use https://reincubate.com/camo
1.5 years ago, before the damn pandemic. I did not realize how good we had it.
This is a focused campaign

What's the evidence for this?
Similarly, I'm struggling with the settings / turning on forge.

I'd love to be able to list issues, read them, comment on them, edit them, add/remove labels, etc.

Basically, trying to recreate https://www.youtube.com/watch?v=VVOd1yOKVqQ (using the original magit/forge) inside of vscode!
I feel like the brokerage I was using would make the purchase at market close (Vanguard index funds). I assume at the market closing price? That gets rid of a flash crash danger anyway.
AWS multi-account structure with AWS Organization
We could call it the iBrick (tm)

you laugh but the apple store search logs probably have 10k hits for iBrick after you posted this.
Its only needed legally so courts can act
Same , but with:

- Ryan Caraveo, u okay?
- ...of course, K.Flay
> Job Title and Salary

"Compensation will depend on your experience"
I think your argument makes sense when the day counts are close to each other. There really isn't any difference between a 55-day and a 57-day, nor does it make sense to account for some sysadmin who took a vacation day.

I still think that your usage of "0-day" breaks down precisely in the case we're in currently, where the vulnerability has been exploited in the wild and Microsoft has known about it for some time, but there is not a patch available, and the general public (everyone who has to defend against the exploit) found out about it today.
I'd add Futura there for sure, and due to "former professional inclinations", Computer Modern.
It is always the same thing, someone comes and says, please use Django, then someone comes and say but I'm going to use React in the front, then someone comes and say, why would I need react?

A framework is an opinionated piece of code that helps several people understand the code everyone is creating.

If you are alone, the need for a front end framework is equal to 0
https://cure53.de/

https://www.nccgroup.com/uk/
Pickl Giveaway
Hi! PICKL is hosting a $50 giveaway this holiday season! Be sure to enter!

To Enter:
1. Must be following @PicklPosse on Insta
2. Download PICKL App (found on Apple Store)
3. Like the giveaway post!
4. Tag 3 friends
5. Leave a comment on why you love PICKL!

- SHARE on your feed and tag us @PICKLPosse for an extra chance to win!

Winner will be announced Monday 21 @5pm PST!! Gooooo PICKL!
Not to be cinic here, but it probably depends on what company sponsored their research, and wanting to profit off this drug
"Gell-Mann effect" I had never heard of it. Looked it up. Thank you. I especially love the way it is named...
Probably just the company wanting to push out some engineering blog content, and very unfortunate phrasing in the blogpost itself. If they'd framed it as "let's learn how Signal's encryption works" there would not have been any issue.
Hyper 0.14: A safe, reliable, fast HTTP library written in Rust
Show HN: Slack app to schedule messages so you don’t harass people this week
I don't disagree broadly, but there's a big difference between something that give's you the user a heads up and something that is backed by evidence and is medically useful.

Chest strap heart rate monitors that cyclists use produce useful data, but obviously you aren't going to strap one on every day.
> I find YT does a gradient ascent into more popular videos.

Doesn't this totally contradict the claim that youtube pushes people to the extremes?
It's a pretty stark difference when you have one video in an otherwise blank youtube account vs having zero.
I'll keep these in mind.

I like to ask open-ended questions. "I am trying to solve X problem, how should-I do it?". That reduces the rote bias and also checks if the candidate can communicate.
> I don't want to rebuild the wheel and write custom CSS every time I need a new component.

You are telling me it is worth migrating to a new architecture/build with all the overhead just so we can have less time writing custom css? Surely you jest. Devs should not define their jobs as cookie cutters. We use common stuff as a base to start work on the customized business facing solution yo.

I've seen some custom PHP production codebases with plain css and jquery doing its thing with 1x10^6 plus weekly traffic. It was a pleasure to read and figure out. I could throw an intern at it and he would figure it out. Verbose as hell too.
I went into this article with so much skepticism, but yeah, the author addresses all of my concerns. This is a cool project and now I get why you'd do it this way.
Interesting, I hadn't heard of static website generators. Did some googling. Would this limit my website in some way? For example, would login functionality be unavailable since everything is preloaded?
It's similar. libdispatch is primarily a task queue to simplify and optimize multithreaded workloads in objc/swift. Tokio uses a similar task queue pattern for scheduling cpu-bound or blocking io, but the main feature is an non-blocking/asynchronous IO runtime. Overall, it's more similar to libuv (the async io library that powers node.js), but with built-in support for Rust's async/await syntax
Second Gaia for outdoor activities. Map layers you won't find anywhere else; some that I use frequently are cell coverage, snow depth, many different aerial layers options, public / private land. They incorporate many region / country specific topo and aerial layers too. Their website is also great for trip planning, and the data you create there syncs with the app. Well worth the $40 annual subscription for me.
Nice keep it up
For me, it was contactless payments. For the longest time I didn't want a contactless card, a little bit out of fear of someone being able to steal just by being close enough but mainly out of "it's such a minor convenience it's not worth asking the bank for the card". Several years go by and the non-contactless card expired, and the new one was contactless, but I still wouldn't use it.

Then one day I did, and holy shit it's the best thing ever, I'm never using cash again (this was before covid hit which has made contactless mandatory now).

I'm sure there are a few other things in my life like this, i.e. things that I'm aware of, but making stupid choices about, I'm just not aware that it's a stupid choice.
> Cracking The Code

> [...] Once the decrypted key is obtained, we needed to know how to decrypt the database. To do it, we used Signal’s open-source code and looked for any call to the database. After reviewing dozens of code classes, we finally found what we were looking for

> [...] After linking the attachment files and the messages we found that the attachments are also encrypted. This time, the encryption is even harder to crack. We looked again into the shared preferences file and found a value under “pref_attachment_encrypted_secret” that has “data” and “iv” fields under it.

Today I learned that I can do code cracking too...
Launch your apps as Firecracker VMs in 20 regions
I probably would've bought a Versa 2 had Google not acquired. Unfortunately, Google being anywhere in range of a product makes it radioactive.

I'd definitely agree the battery life on Fitbit is a huge deal, I used to get a week out of my Ionic, though as it has aged, it's good for less than a day (replaceable batteries needs to be a thing again in tech). The sleep data was pretty interesting, although I don't feel like it was ever actionable for me.

I absolutely think there are opportunities for health (in another comment, I talk about a personal experience with my Fitbit), but Google will not be the one leading the charge on that. Their focus is, and will always be, ad revenue.
Perhaps we should reframe how we approach new knowledge?

"That was a super interesting book, it brought up lots of ideas and explanations, lets discuss what parts if any we think are true." !

Folks call out information and facts as fake news, not apply healthy skepticism but a rejection of all knowledge and then at the same time falling for hoaxes.

The whole country needs to take a gap year and learn the scientific method.
> rustafarian

The community prefers the term "rustacean" to be as inclusive as possible. Please keep that in mind in the future.
I have never seen this in practice (but I'm sure it happens all the time). At the places I've worked/hired, if a candidate's ask was below the bottom of the range we paid that role, we just paid them the bottom of the range (regardless of their ask). It's a win/win from a hiring perspective. You hired a candidate for the minimum you possibly could (from a budget perspective) and the candidate is grateful you didn't hire them on their bad ask.

At some terrible companies even, it's harder to hire someone outside of their defined salary band. Even if you don't care about being nice or paying fairly, your life is just made easier by paying them the bottom of the range rather than dealing with HR about salary bands.
> I've spent a few years in medical research, this is the future of medical research.

Sadly, I think the real money will be in using health data for fine-grained insurance pricing. "Oh, you want our preferred rates? Then wear a FitBit/Apple Watch and let us see your data."
They automated taking pictures of app content on an unlocked Android phone, and bragged about it as a breakthrough tech, then deleted the article and replaced it with fluff. Embarrassing.
Which is why the actual announcement of the investigation is titled "Commission opens in-depth investigation into the proposed acquisition of Fitbit by Google" [0] written a month before.

The title you are commenting about is written by the CEPR, an institution independent of the EU, which supports that opinion with their own arguments. This should not be confused with the Commission's investigation.

[0]: https://ec.europa.eu/commission/presscorner/detail/en/ip_20_...
I grew up being forced to eat everything in the plate. Now, as an adult, I keep doing that even though I am fully aware I don't have to. The result is that I eat much more than I should.
It's not a nitpick. The "Gell-Mann" in the name elevates a novelist and pundit's ideas to those of a Nobel physics laureate. It's worth pointing out!

It's also a frustrating argument. What does it actually say? "Journalists are often wrong". No shit! That's why it's called "the first draft of history". Meanwhile, everybody is often wrong. But we don't have a "Djikstra amnesia" to describe all the times we fall short of the ideals of our own discipline, but forget about that when holding other people to our notional ideals of their disciplines.
Yeah, but we discovered oil. Humanity suddenly had unbounded energy to do what it needed to drive machines. Both capitalist and non capitalist systems brought over a billion people out of poverty. USA and Europe on one hand and USSR and China on the other. Behind it all is abundance of energy. It would be a mistake to attribute it to a system like capitalism which never really existed in anything close to a "pure" form anywhere ever.
Good overview, but I'm not sure I agree with the assertion that OAuth/OpenID is unconditionally more secure. It still depends on both the provider and the intermediate site doing things properly, like generating actually random values, not reusing randomness, not leaking tokens, and all the stuff you have to worry about normally.
Myriad and Garamond for Apple copycats.
I’ve taken this strategy before, but now that I’m more senior I’ve found there are lots of positions that are not even in the right ball park that I’ll only find out after wasting a bunch of time.
First few weeks of bitcoin ;)
Right... probably nearly every language has a poor call stack overflow recovery story, not only because of non-heap stacks but I don’t think it’s relatively straightforward to get the program back into a well defined state after call stack overflow. Those errors can happen on any line of code so unless every line of code is guaranteed to be atomic and a coherent state can be derived from the intermediate states, the program will be in an undefined state.
Author here. Firmware, for better and worse, is stuck in C/C++ land, so many of the topics here are essential to keep a complex, multi-MCU, multi-board setup in working order.

I'm actually really curious what you all do in C/C++ to prevent bad operations from ever being performed in the first place.

For example, should we just change our internal malloc / free to use double pointers instead?

bool malloc(size_t n, void **ptr) {
*ptr = <memory>
}

void free(void **ptr) {
... <free>
*ptr = NULL
}

This way, if anyone actually tries to use that pointer, it will crash the system (hardfault), instead of potentially using corrupted memory, which IMO is much worse.
For now Github is the only supported forge. The repo has to have a github remote defined, and it will try to load issues and pull requests.
The forge functionality is very new.
Your comment was "dead", but I see nothing wrong with it and vouched for it. This is a valid question asked earnestly.

I'd honestly like to know too.
I encounter an error that I can't currently find exactly but it happens when running mismatch_profile from the RSeQC package. It reports a mismatch in the length of the cigar notation and the actual read inside a BAM file. Lately I have become 99% sure that this sometimes happens in files that did not show this error before (we reprocess a lot of data from time to time). I suspect it is bit flips because I think bit flips can easily go unnoticed, but not in this case, because the cigar notation is a shorter description of the actual read and they should thus match. The mismatch signals a change in the file that occurred without us touching it.
There's plenty of ordinary evidence that corporations monetize data.
I'm comparing website vs website when I'm talking about web performance. You're comparing Electron apps vs... native apps?
As always, very elegant. Thanks for the added info.
Just plain YES.
> To give a concrete example, "move fast and break things" is fine when you have 100 people relying on you,

If you are OK with things to break you are not relying on it, I would say.
Ask HN: How do real crackers learn?
I'm talking about the kind of crackers who penetrate in systems, create zero-day exploits and the like. I never met one (obviously!) but I wonder how do they learn their stuff. Do they read deep tech stuff regularly? I assume they already known all the internal details of whatever system they are trying to crack (e.g., TCP/IP, ssh, HTTP, Linux, etc.)... I guess they learnt that stuff at some point in the past and then moved on. Moved on to what? I suppose they stop 'reading' and started to 'produce'; they don't learn from others, they are the source of knowledge for some topics (I mean, a zero-day exploit is something that cannot be learnt... one must come up with it based on previous accumulated knowledge).

I guess I won't ever be able to know how real "crackers" learn by just searching on the internet... but since HN, perhaps you guys know a guy that knows a guy that actually knows how real crackers learn. Would be interesting to read that!
There is no stock right or wrong answer for those kinds of questions.
You should ask questions to understand which area the interviewer wants you to concentrate on (if any). Some interviewers are happy if you choose an area where you can showcase your experience, others expect you to answer an area they have in mind. If you cover enough, with enough detail, they will be happy. Ask questions.
The direct equivalent is the async runtime part of the .net/C# runtime, that is, it's built-in there, but is a library here.
> 1. Loperamide is not unique. I don't know why these researchers have singled it out.

From the paper:

> We previously screened a library containing autophagy-inducing compounds and identified the Food and Drug Administration-approved drug loperamide (LOP) as potent inducer of ACD in the glioblastoma multiforme (GBM) cell line MZ-54 [7]

7: Zielke S, Meyer N, Mari M, et al. Loperamide, pimozide, and STF-62247 trigger autophagy-dependent cell death in glioblastoma cells. Cell Death Dis. 2018;9:994
Multicore & multithreaded architectures only prove even more problematic as you do context switching and have sync io. That's precisely why it's not just the language (C++); it's also moving to a highly async architecture with shared-nothing, non-blocking architecture to get the best advantage out of your multi-core, multi-cpu machines. (Disclosure: I work at ScyllaDB.)
Not a full solution to the no-common-root challenge but rebase [1] does provide the option to:

git rebase -i --root

[1]: https://git-scm.com/docs/git-rebase#Documentation/git-rebase...
a) Haven't done much A/B testing in a while, but Optimizely has what seems like a huge library for React, which suggests this is false.

c) I can attest that this is complete bollocks, I have React apps in production that are blazing fast, and I have seen many others in the wild. I've also built a few prototypes in Next.js and got near-perfect speed scores without optimizing anything. I can only imagine it's gotten better in the last year or so.

d) I guess depends on definitions of "decent" analytics, but I've seen a few analytics solutions working with React in production and they worked more than decently.

As a closing thought, Facebook uses React all over the place. They are massive on personalization, analytics and A/B testing, for better and for worse, at hyperscale. I guess you think it's just the exception that confirms the rule?
I don't use Facebook much any more but a lot of the noise on there can be blocked (the ads which are conveniently labelled as sponsored, and "suggested for you").

They've seemingly gone out of their way to make this difficult by putting each letter of "Sponsored" in its own div, but you can make a filter based on the aria-label instead.
TIL, thanks for the correction
Honestly I tried this every time I was interviewed. Never could get them to give the first number. I probably should have been firmer but usually the pressure of the situation led to me giving a number I would be happy with.
I mean, the margin of error is definitely larger, but I wouldn't say you can't call Fitbit data "evidence". And again, I would definitely say it's medically useful to have a general daily baseline to compare against.

If my Fitbit says I'm usually here and then all of a sudden, I am here, the sensor may not be super precise, but it's absolutely evidence that the measured value has changed.
Thanks for the heads up about tweets, I had no idea.

I've actually started working through the startup tutorials for both Flask and Django. However, I was worried that Flask wouldn't have the necessary functionality as I'm imagining log ins and voting systems.

I started on Django but despite my Python experience I found the structure pretty complex. Do you think Django is worth the extra effort over Flask?
Does Apple monetize their health data? I'm not talking selling ads against it, but monetize it in any way? Do we consider that harmful too?
You're welcome, thanks :)

If you want to dig deeper:

* https://www.infoq.com/presentations/rust-2019/

* https://www.infoq.com/presentations/rust-async-await/
I would also add Don't use wordpress! As a developer you'll find yourself constantly hitting a wall trying to get wordpress to do what you want instead of wordpress working for you.

You could learn Flask, which is very simple but I wouldn't recommend learning React/Vue just yet, rendering the HTML on the backend as opposed to using a JS framework will make your life a lot easier, specially if you are not familiar with browsers and the problems that JS frameworks are trying to solve.

As for design, you can copy/paste code from something like bootstrap/bulma/foundation to create a decently looking UI wihout having to learn a lot of HTML/CSS.

For the DB, just use whatever you use before on python and at the end of the day you'll pretty much end up with an HTML template, and just pass a dict to fill it with whatever data you need, totally decoupled from where that data is coming from, whether it's an API or a DB or whatever else.

Good luck!
Today also saw the release of Hyper 0.14, the HTTP client built on top of Tokio [0]

[0]: https://news.ycombinator.com/item?id=25521217
I dont think this has anything to do with worth - its just a good advice.

There is no objective measure and you likely underestimate what you are "worth" to some companies.

As a consultant it might be different because roles are different and you aren't really talking to HR at that point, e.g salary negotiation
Can be bypassed by changing that to "Salary Range for this position"
When learning Rust a few months ago, I built a small client library for a REST API using reqwest (which uses Tokio). I then started writing a web app using Tide (https://github.com/http-rs/tide). I eventually realized that it would be difficult to use the library I had built earlier since Tide uses the async-std runtime rather than Tokio. That was very disappointing. Is there any plan to make it easier to write "runtime agnostic" libraries in the future?
Nowadays, you can identify as whatever you want.
Fun party fact: long ago, Rust had libuv built in too.
I’ve used chicago95 as a daily driver for a few years now. It’s simple, high contrast, gets out of my way and lets me work.
It's only funny if you don't get to deliberately select the music yourself to make yourself seem more edgy/cool/punk/folk/etc.