skysight-inc/HackerNews huggingface dataset:
Ha, it was a very Frankenstein-y stack. I wrote everything in markdown, then rendered to html with multimarkdown (https://fletcherpenney.net/multimarkdown/), and then converted to pdf with wkhtmltopdf (https://wkhtmltopdf.org/) and to epub/mobi with Calibre's ebook-convert (https://calibre-ebook.com/)
I'm one of the engineers behind Jazzer and happy to answer any questions about it.

We also have a blogpost that talks about the most interesting technical aspects of Jazzer: https://blog.code-intelligence.com/engineering-jazzer
Are you aware of software developed as a hobby or as part of the actual product (without making the user a product) or as a limited version demonstrating full product?
I'd say that it's not thinking too much -- your brain can't stop thinking! The issue is not being aware that you are thinking and that's what cognitive therapy, meditation and mindfulness is all about: being present while you think allows you to understand how this thought process affects your emotions.
Yeah, for one, you can actually enter the palace and not stay outside. The numbers of visitors in versailles absolutely dwarfs british palaces. I'm talking 'more visitors[0] than the british top 10 combined[1]'.
And the fee to enter is not cheap. 20€.

[0]: https://www.statista.com/statistics/991925/visitors-palace-o...

[1]: https://www.statista.com/statistics/373081/uk-royal-tourism-...
But will anything change in the minds and hearts of developers?
Should be able to use ffmpeg[0] to extract a single frame each second/keyframe (doubtful it's worth doing every single frame) and then pass it to tesseract.

For speech to text.. if english, try mozilla's deepspeech? https://github.com/mozilla/DeepSpeech

Might be fun to try.

[0] https://stackoverflow.com/questions/27568254/how-to-extract-...
I estimate about 70% of bitcoin mining is ESG (clean or preventing hydrocarbons), that article suggests up to a quarter is coal. Fits.
thanks for the kind words! :)
NSW, Aus offers SIX Maps: https://six.maps.nsw.gov.au (this offers very good imagery of the NSW areas, better than google)

That's the easy-to-use-maps.

There's also the aus-wide https://nationalmap.gov.au where you get basic satellite maps with the option to add various datasets and even daily maps from Landsat 2A

There's also ELVIS foundation spatial data https://elevation.fsdf.org.au

There's don't really cover hiking trails that much, etc. There's more general purpose mapping applications.

It's also possible to find various topographic maps in static form somewhere on the government sites.

Councils are the ones that provide the hiking trails, etc. so it depends on the locality. The Northern Beaches council for example provides an interactive trails map, but most have static maps.
I'm from a third world country. Stop with the off-putting virtue-signalling. Everyone knows what is meant by the term, even if it isn't necessarily an accurate representation of the relative development of countries.
You did not. Realsexycyborg has no idea if this is being exploited or not, she’s only speculating.
> gateway for actually updated POIs, which still required the web interface

Vespucci app can be used to do it directly on phone.

Vespucci vs StreetComplete are quite interesting, in many aspects they are complete opposites.
F-strings are much faster:

In [4]: a, b, c, d = ("123", "456", "789", "0ab")

In [5]: %timeit a + "-" + b
139 ns ± 10 ns per loop (mean ± std. dev. of 7 runs, 10000000 loops each)

In [6]: %timeit "%s-%s" % (a, b)
198 ns ± 13.8 ns per loop (mean ± std. dev. of 7 runs, 10000000 loops each)

In [7]: %timeit "{}-{}".format(a, b)
248 ns ± 9.17 ns per loop (mean ± std. dev. of 7 runs, 1000000 loops each)

In [8]: %timeit f"{a}-{b}"
99 ns ± 2.48 ns per loop (mean ± std. dev. of 7 runs, 10000000 loops each)

In [9]: %timeit a + "-" + b + "-" + c + "-" + d
344 ns ± 10.3 ns per loop (mean ± std. dev. of 7 runs, 1000000 loops each)

In [11]: %timeit "%s-%s-%s-%s" % (a, b, c, d)
290 ns ± 9.64 ns per loop (mean ± std. dev. of 7 runs, 1000000 loops each)

In [12]: %timeit ''.join([a, '-', b, '-', c, '-', d])
245 ns ± 2.32 ns per loop (mean ± std. dev. of 7 runs, 1000000 loops each)

In [13]: %timeit "{0}-{1}-{2}-{3}".format(a, b, c, d)
471 ns ± 23.6 ns per loop (mean ± std. dev. of 7 runs, 1000000 loops each)

In [14]: %timeit f"{a}-{b}-{c}-{d}"
176 ns ± 11.9 ns per loop (mean ± std. dev. of 7 runs, 10000000 loops each)
But isn't it? I can believe people inside Facebook really thought it was a critical problem, but I don't see how it could have become any more than an inconvenience.

- There's a websql polyfill. I don't have experience with it, but it looks like a drop in replacement. This is such a strong counterpoint, the rest almost doesn't matter.

- Features tend to be disabled in Chrome with some advanced warning. Not overnight.

- websql is still enabled in chrome today

- if the api were disabled, ad customers could be directed to flip the feature switch in Chrome. If money is on the line, seems like an easy enough task.
Human interaction isn't something work should be responsible for providing. It was an incidental benefit of being in the workplace, not an employer-provided perk. Maybe if work paid time and a half to attend, but in the meantime I won't sign onto a zoom chat unless it's mandatory for doing my job.
For apt repositories you can do pinning by origin, which should prevent this issue.
I don't underestimate the amount of C code written against POSIX, luckly the last time I did it was in 2001.

Since then, language runtimes have spared me the effort, and I am not alone.
I think you've just proved the comment you are replying to correct though. You were still interested enough to visit knowing that it exists solely for tourism in advance, and presumably only came to your conclusion afterwards.

These are not the sorts of places that people typically visit on overseas holidays more than once. So once the ticket has been bought, whether or not it is "an actual royal palace" is irrelevant.

Of course people like to feel the glamour of being close to the mystique of living wealth, but once an attraction is firmly on the circuit it hardly matters. See Tower of London, Blenheim Palace, Edinburgh Castle, Hampton Court Palace, etc.

According to Association of Leading Visitor Attractions, Buckingham Palace would be around the 70th most visited
attraction in the country, hardly a sign that you need a living monarchy to sustain tourism - https://www.alva.org.uk/details.cfm?p=423
I think the best way to get a burner account is to use the free services to receive text messages online. These are enough to create an account, and you can then set a pin to prevent any takeover, assuming you synchronize your account every week.
For speech-to-text extraction you can try Silero [1].

Free software (AGPL-3.0 License), fast, highly accurate and extremely simple to deploy (I have no affiliation with them).

[1] https://github.com/snakers4/silero-models
It looks like it works for previously opened files. Perhaps the author didn't want to load the whole tree into the browser, or maybe its a limitation on webhosted vscode?
Baud, the canonical unit for transfer speeds, was defined in 1926[0], five years before this guy was born.

It was probably somewhat obscure during his teens, but he isn't even much older than the inventors of the Internet who are pushing 80.

And, subjectively, it seems like connection speeds were far more present in the Zeitgeist of the 90s. I distinctly remember going from 28kbps to 56kbps to 112kbps, but I would have to look up my current connection's specs.

[0]: https://en.wikipedia.org/wiki/Baud
Ehehe nice story.

I remember when we were to be shut down by AWS because the bill was 2 months due and the administrative contact was a inbox nobody looked at.
We discovered it by chance, doing a nightly maintenance: services started to disappear one after another (including the Redis that powered the login, we weren't able to login into the product for half an hour!). We immediately phoned AWS support and asked, no, begged them to turn them up again. They did and we paid everything the morning after.

Hadn't we been in front of the PCs doing the maintenance and witnessed as it was happening, we might have woken up the day after without an online bank (yes) because the production environment would have ceased to exist...
No worries, this was debated fiercely. In the end, we had to choose between "Python has a reference syntax for pattern matching" vs "Python continues to have disparate 3rd-party extensions for pattern matching, without clear leader".

The essence of the issue you quote is that Python needs block-level scope for variables (in addition to the standard function-level scope). Similar to what JavaScript acquired with "let" and "const" keywords. That's more pervasive issue than just "match" statement of pattern matching, and thus better handled orthogonally to it.
This only works if someone who follows this <username> has already signed up to the service.
The fact that just about anyone can be heavily armed means police needs to be extra vigilant or else risk their life.

Otherwise people feel so extreme and polarised. You've got Hawaii and Bay Area liberals vs rednecks. Both are very strong with their opinions.
> Even Linux will eventually be replaced by something else, when all the kernel engineers that helped its adoption are gone.

I disagree. Linux has reached critical mass, the biggest tech giants depend on it heavily and are the main contributors. If some new fancy subsystem, interface or syscall would benefit Google's workload, they will implement it and it gets merged since even of Google will be the only one using it, that automatically means it has millions of users. You come along with a not completely polished and thoroughly tested Lego mind storms usb driver for Linux today, you'd get laughed of the mailing list, because security and who will maintain that? I mean security is good and stuff, but Linux is a commercial product today and nothing a curious 16 yo can get involved with like in the early 2000s.

> It won't be tomorrow, but it will come.

I mean if you're talking decades here you're probably right but then again that also will hold true for Windows, Chrome, HTTP/3 and basically everything.
I'm saying they would have find a way to deliver the app to customers, whether in desktop or web form. And customers would have downloaded the app if needed, as it seems to be the only powerful way to manage ads.
One case where .format comes in handy:

your_dict = {
"some": "awesome",
"from": "out of",
"dictionary": "mapping",
}
"insert {some} values {from} a {dictionary}".format(**your_dict)
AI Based IP Blacklist API Service
AI based IP Blacklist API Service
fopen is part of ISO C, supported by NDK, and pthread is a special case.

https://developer.android.com/ndk/guides/stable_apis

> Note that on Android, unlike Linux, there are no separate libpthread or librt libraries. That functionality is included directly in libc, which does not need to be explicitly linked against.

Better learn how much POSIX Android actually allows.
They went for "UB" exactly because they understand the current behavior is not ideal, and to allow for better implementation and to change it later.
I love it! Cool to see this happening.
It raises interesting questions of whether Google (advertising company) should be the guardian of the web's primary browser; strategically it could deprecate features direct competitors depend on (let's assume FB is now also a ad company). The fact that web's primary ad platform also owns the web's primary browser sure is "interesting". The inverse of that is that it might not have incentive to deprecate features - which Google the company / partners depend on or might not be able to deprecate due to legal consequences of doing so (shutting down 25% of FB's revenue might raise eyebrows in the gov).
For hiking, what I also like to do is add small and "useless" features to the map, that can help navigation.

Like, if there is a small open spot or some minor structure in the middle of the woods, I will add it. If someone is walking and not sure if they are still on the right track, they can look around, see the open spot, see the open spot on OSM, and know that they are indeed at that place.
Which is why it is so vital for anyone with at least minimal tech know-how to run their own email infrastructure. The Internet is only a meaningful concept if it consists of peers running standard decentralized protocols.

If all we had was a few giant corporations with proprietary apps and proprietary protocols, that's not the Internet.

As I post every time on these email discussions, the difficulty of running your own email infrastructure is vastly overstated on HN. The more people do it, the better off the Internet world is for all of us.
When I was 10, I painted all the light on my computer case black with watercolor so I can keep it running to download Mandrake linux without my mom noticing —- it would take more than a day to download with a 56kbps connection. Somehow she did find out in just a few hours, may be I should ask her how :-)

I also had the windows key memorized just like the author does. But it was windows 98, and I can’t recall it now. I think the last time I tried to write it out was when I was around 18, so the key lasted at least 10 years in my memory
But the broad issue will never be resolved. The entire foundation of society is built around some trust. What has proven to work is that we trust actors who are identifiable and have something to lose. This goes with everything from your bank, to government, to name brands, to your local restaurant.

Nix package managers/repositories have a level of scrutiny to get into, and highly dedicated people in charge of. Random github repos (or npm packages) are extremely low effort/risk to set up.

Of course the former can be abused, but the incentives are at least in its favor to likely be more trustworthy. And we have to make assumptions of trust everytime we sit down in our chair or turn on our computer, or plug in a space heater. We will never get around trust, but there are differences in levels of trust and trustworthiness.
Ha! I’m sorry but it’s already screwed. Compared to where we stood when people were actually arguing for a free and open internet and against centralization and corporatization we have arrived at almost all of their dire predictions and the last few seem to be well on their way. No one is fighting it anymore, they’re just trying to grab the scraps that fall off the table that the big five sit at and hoping they don’t get stomped into oblivion by the giants.
Java File doesn't expose POSIX semantics directly.

In fact, there are special derived classes to handle file system specific semantics, if one feels inclined to do so, but that doesn't mean they work all the time, as JVM runs anywhere.
No, The idea that any court would say that someone walking around, playing music on their phone, while walking around outside, should be punished in any way, is so obviously false that it is just silly.

As in, maybe there has been 1 or 2 times, in history, where a court has ever punished anyone, for merely walking around, playing music on their phone, if it has ever happened at all.

> there are plenty of bands that would be happy

And the band would waste a lot of money and lose in court doing that.

I am truly curious as to how far you actually think this goes. As in, do you truly believe, that, to give a more extreme example, if someone was walking around, and had headsets in, and was listen to music but someone walking next to them could hear it, that any court ever would call this a public performance?

I mean someone can hear it right? That makes it a public performance? No. That is ridiculous. This would never happen.

Because that is only a slightly more extreme situation.

Copywrite law would be completely meaningless, if you are willing to bit the bullet on these kinds of extreme hypotheticals.
> Aside from performance, in my opinion a better API would also be transactional, at the filesystem level

A better API shouldn't be a filesystem. As a strictly hierarchical system, its only virtue is that it should be easy to create sandboxes and reason about the resultant guarantees. Emphasis on 'should'; in practice, chroots are easy but very ineffective. (I believe fuchsia[0] and plan9[1] do a slightly better job of this.)

Systems based (for example) on tags and tag categories are faster, more expressive, easier to reason about, and can be constructed into arbitrary trees on the fly should the need arise. (They are thus also capable of presenting a hierarchical interface to a legacy application, so compatibility isn't an issue.)

0. https://fuchsia.googlesource.com/docs/+/dart-docs/dotdot.md

1. Because plan9 does a better job than unix of making all resources files, inability to access some subset of files is a stronger guarantee.
Polish media go off air for 24h to protest new tax
Many private media outlets went off the air in Poland for 24h on Wednesday, running slogans like "This used to be your favourite programme", in protest against a proposed media advertising tax they say threatens media independence and diversity.
I didn’t know that such a polyfill existed but even so, that was pretty much my reaction. Facebook would be quite capable of developing one, and potentially a route there to something more service-based once the panic is dealt with.
"f(x)" and "|" inside a regular expression mean something different. Similarly here, pattern matching has its own sub-language (a DSL).
I mean...sure, never blindly trust anything. But is there any proof of "malicious intent" in OSM mapping, having lead to actual issues?
Zen 3 SMT performance analysis: https://www.anandtech.com/show/16261/investigating-performan...
To mitigate this kind of supply chain attacks for python, we have created following tool [1], that will check python packages on Artifactory instance you specify and create packages with the same name on the PyPi.

[1] https://github.com/pan-net-security/artifactory-pypi-scanner
This one is free, but if you're on a mac try using amethyst wm[1], firefox with tridactyl[2] and keep work in the cli with something like tmux.

I've been experimenting with it for a week and I'm amazed how much not reaching for the mouse keeps me in the flow. If you're on linux obviously something like i3wm would work the same

[1] https://ianyh.com/amethyst/
[2] https://github.com/tridactyl/tridactyl
> I think I just quote Banksy

Banksy is not the original author, Sean Tejaratchi is:
https://en.wikipedia.org/wiki/Sean_Tejaratchi#Crap_Hound
https://i.imgur.com/D0pTs.jpg
> it's just a slightly more usable list of EC2 properties and costs

For anyone who has to constantly (re)evalaute EC2 instances, this is a huge understatement. Now, I just looked at AWS EC2 pricing page and it looks way better than what I remember using in 2018.

Back then, for a given instance family, the specs and prices were on separate tables, making it maddening to compare. And forget comparing across instance families. instances.vantage.sh nee ec2instances.info made that so simple. Even the AWS ProServe employees that I worked with preferred it.

So AWS may have closed the gap but ec2instances.info is still superior since it offers advanced features such as "sorting" and "searching". The "Compare Selected" is super handy as well.

The biggest plus for Vantage is that ec2instances.info wired in to my fingers, I suspect that's true for a lot of AWS devs. By buying this site, they get a lot of eyeballs for their product. And frankly, it does make sense - Vantage is trying to selling you a better AWS console, this is a better pricing page, so it fits. The original dev gets some cash for a side project that was probably a huge headache to deal with. Win win for both parties.
Text Adventure Literacy Jam – Create a Text Adventure Suitable for Children
Really nice product
But that's not the case at all. The dictionary that defines rape is still up and still ranking in Google search results. There's just no advertising allowed on that page. And you could argue that Google is being overly-puritanical, but you could also argue that most of their advertisers don't want to be associated with such words, even in a neutral context.
It's funny that people want to work at Facebook or Google but don't want to work on ads.

In other companies, everyone wants to work near the profit center and avoid cost centers.
And way worse it doesn't even keep word order and similar.

So searching for `fn foobar` will return any file containing the words `fn` and `foobar` not caring
about you looking for `fn foobar`.

Then if you find what you want opening the preview doesn't jump to the right line in the file so I have
to search again using "find in page".
Love Gaia GPS as well. Location search is hit and miss, but once you're on a trail, it's a flawless app.
It's still called Rails but it's a radically different framework now. 2009 was before the big merge with Merb (a then competing framework).
It's not the equivalent of the superbowl for the Dutch. It was never a yearly competition to begin with. It was always a very rare and unpredictable event- the 4th edition took place 12 years after the third, and the gap had nothing to do with climate change: it was 1929.
I don't think this proves anything other than there are often contradictory idioms in chess, here's one attributed to Larsen: "If you find a good move, look for a better one".
Stare for a while, then click right mouse button -> View image. What a trippy illusion when it stops zooming.
The article mentions that RubyGems is vulnerable to this, and that Shopify in particular downloaded and ran a gem named "shopify-cloud", but I'm curious as to how this is possible given a "normal" bundler pure-lockfile setup, or more generally the source-block directives I've seen in most Gemfiles.

That is, given a Gemfile.lock like, e.g.

GIT
remote: https://github.com/thoughtbot/appraisal
revision: 5675d17a95cfe904cc4b19dfd3f1f4c6d54d3502
specs:
appraisal (2.1.0)
bundler
rake
thor (>= 0.14.0)

How would Bundler ever try and download the `appraisal` gem from RubyGems?

The Gemfile section is more explicable. While newer Gemfiles look like this:

source "http://our.own.gem.repo.com/the/path/to/it" do
gem 'gemfromourrepo'
end
# or
gem 'gemfromourrepo', source: "http://our.own.gem.repo.com/the/path/to/it"

Older Gemfiles apparently looked like the following:

source 'https://rubygems.org'
source 'http://our.own.gem.repo.com/the/path/to/it'

gem 'gemfromrubygems1'
gem 'gemfromrubygems2'
gem 'gemfromourrepo'

Which seems obviously vulnerable to the dependency confusion issue mentioned.

So is the understanding that Shopify's CI systems were running `bundle upgrade` or another non-lockfile operation? (possibly as a greenkeeper-like cron job?) Or is `--pure-lockfile` itself more subtly vulerable?
Exactly, it's a shit pit of affiliate marketers pumping anything for that <2% referral fee they get. As a side hustle they probably drop ship everything they are selling via Amazon affiliate links too.
I know that node has `package-lock.json` and `yarn.lock`, which include integrity checks. Are these checks decorative only? How could npm have been affected by this issue?
Author here - Thanks, I'm proud of that test! It wasn't as easy as just running the thing to figure out, as it crashes on high-end CPUs without the right affinity mask. I've done a couple of videos on it on my YouTube channel. It has two main limitations: 32 threads or 23 cores. That ultimately limits how good Crysis can be on it (you need 23 really fast ST cores), currently around the 17.7 FPS mark at 1080p Low settings.
LinkedIn for E-Commerce Business
No, that's not robust. The idea was simple - to use explicit marker like:

case == FOO:
case is True:

That was part of PEP642, but it ended up containing more other questionable things. I hope that particular point will be separated and implemented.
If anyone is looking for actually useful cross-repo search: https://grep.app/
Techniques for Managing Component State – Progressive Loading in Angular