skysight-inc/HackerNews huggingface dataset:
Some people will use this to argue against dependencies or npm, but I would argue that this vulnerability is actually a great example of why those are good things.

The bug is caused by an esoteric IP address notation. Nearly everyone who would need this functionality would get the implementation wrong. In the exact same way the author of netmask did. However, netmask is now fixed and this bug will now no longer appear in any new implementation.

Even better: npm will start to give warnings about this vulnerable package and will provide a fix through npm audit. Everything that is maintained in a reasonable way, will now no longer have this vulnerability.

This is not a failure of dependencies or npm: this is an example why those are good things.
No one (that I'm aware of) has managed to make a successful business of "curated" packages (interested to hear if there are any).

You get companies doing things like version checking and basic scans for malware, but that wouldn't catch issues like this.

My guess is that the volume of security review you'd need to do, for it to be usable by enough companies, is massive and a lot of the review would need to be manual.

Then as you add libraries you need to dedicate resources to reviewing every new release.
More likely NEMA2000 which is on CAN, as opposed to serial (not RS232, but only an electrical engineer can understand the difference). CAN vs serial requires different message formats, but the difference is irrelevant if you don't have to implement it. (I've personally had to implement both)
Sure, but there is a chance you will update them, whereas if you'd homebrewed the code or copied the code in, the bug would probably never be detected or fixed. And for those who do care about their packages and deps, they update in a timely manner.
Unsure exactly what you mean, church costs - donations = taxable "profits"?

Not sure I really agree with taxing donations - I do think that it would cut down on how much churches bring in (as in people would be less likely to donate), and are able to distribute as a commenter above said.

Now, I do believe that all other related income should be taxed by churches, whereas I think only "unrelated" income is taxable now. So for example:

Church makes original christian music and makes income from spotify (or other sources)

Church records their services and puts them on youtube (and monitizes them)

Church rents out building for weddings or other events.

etc

(some of these may or may not be currently taxable, I am not an expert but my quick search seems to think they may not be)
The real problem was the core concept of isolating knowledge, i.e. Layer 2 doesn't know anything about layer 3. That's a flawed concept. The trivial, yet essential protocol ARP break the OSI model, for example. And then there's firewalls...
Sports, online forums, student fraternities, social clubs of every variety, etc. There are many ways to get active in society that don't involve beliefs in higher beings.
Bilibili is a minority player in China, so it's pretty weird to present then as "China's answer to YouTube". I'm pretty sure the biggest video platforms are still iQiyi, Tencent video and Youku (with none of them having a dominant position like Youtube).
Some amount of oversight by qualified people?
A modest proposal for operator overloading in JavaScript
sounds extremely difficult
Have amnesty traveled internationally? Corrupt police overseas are routine- ie, almost every interaction involves cash pmt on spot usually w no receipt for various fines and fees.

I’ve been stopped plenty of times by cops in US and have never had to pay a spot fine in cash
>The thing that underscores all of my experiences has been hypocrisy.

This is, consistently, what I hear from friends and family as to why they have drifted away from the Catholic church, and is solidly my own reason as well.

You see people, day-in-day out being terrible, judgmental, hateful people, except on Sunday when they're in the front row being holier than thou. It grates on you, and leaves a bad taste. It's even worse, because those people tend to be the ones who gravitate toward leadership positions within your local church.

My theory is that people have always felt that way, but it was harder to nail down these awful people before social media. Now that everyone puts everything on social media, it's easy to see, in plain black and white print, that the deacon really is an asshole.

The one thing that I do genuinely lament from the death of large religious congregations (at least in my part of the states), is that there are no replacement social constructs for people to gather and feel a sense of community. I'm certain this has something to do with the splintering of American discourse; not the religion inherently, but the social aspect is lacking and legitimately missed by most folks.
2013 is calling, it wants its fedora back.
I would say the difference is, standard library goes through mode scrutiny/checks before an update is released.

This of course depends on the library in question, as some non-std libraries are certainly subjected to more checks than others.
That’s how I read it too. Having the case sealed seems like an invitation to actually do some investigation. Instead the NYT played along and tried to bury the story (albeit in a technically ignorant way).
But the alternative is the code was copied in or written from scratch, and that's worse.
Church, synagogue or mosque. Not just church.

Also how about updating the link to direct to the Gallup poll itself?

https://news.gallup.com/poll/341963/church-membership-falls-...
I understand that the authors have very strong pedigree in their field, but given a lot of the motivation stems from regretted node design decisions, is the rust etc expertise on the project deep enough to not make equivalent mistakes that will be rued in another few years?

Genuine question (I assume it is, but presumably it was before with c++) - it just strikes me that once something becomes as successful as node, and given that nothing is ever perfect it might be useful to clarify why the technical insight might be better this time around - at least regarding the idioms of the underlying tech; the added experience at the architectural and implementation side a given.
Fasting Improves Physiological and Molecular Markers of Aging (2019)
The standard libraries receive far, far more review, both at the API design and implementation level. Anyone can push literally anything to PyPI.
They tend to be conservative on cultural issues, but "left" on economic issues and the true "triumph" of the hard right and the failure of the "left" has been that they tied these two things so closely together that people routinely vote against their own interests on economic issues because of how they feel about cultural issues.
QAnon seems to have many parallels with "prophetic" religions where you don't have a priesthood class organizing specific groups of followers e.g. parishes, but you have a priesthood class interpreting the words of a prophet and popularizing these interpretations; in this case "priesthood" isn't a formal distinction, but de facto you tend to have specific minority of people fulfilling this role.
Look up Year without a Summer.
The commits say it was 'sold to zerodium, mid 2017', which would lead me to believe that someone has already been paid for this.

I'd say the reason it doesn't hide better is because it's specifically meant not to hide. It's burning the vulnerability that has apparently existed for almost 4 years.
Why the Wuhan lab-leak theory shouldn't be dismissed
I’m not too sure, I was just quoting the figures Taylor gave after his Laracon demo. I think the beta is being released next week.
This is probably a stupid question, but is AGPL/commercial dual-licensing a viable option for something like this? Instead of relying on goodwill donations & maybe assigning 1-2 devs from major corporations, just explicitly charge them money if they refuse to ship source code to end-users.
There's a long way from freedom of belief to the kind of identity politics practiced by religious groups. Ironically religious people are under the risk of getting cancelled by their own group if they dare wrongthink, so they are less free.
"I can’t help but think the world will be better off when we abolish big religion."

So those people who want to belong to a group and believe in it without seeing what might be better can move into political groups for their identity? The actions and methods are human nature, so I think they will just move to a different domain.
Nah man, Rust has overplayed its hand and has been turned into a meme. We need a new Rust that's exactly like the old Rust before it was cool.
If you take away the "god" element, and adopt a Nietschze approach to religion/culture, i.e. its utility over generations, and where it ends up.

Then areligious would seem to be a pretty useless offshoot, if its always doomed to die out.

Perhaps a third state exists, with purpose and optimism to bring children into the world, but not born out of abrahamic religions.
I don't really see myself as ever wanting to start a company under open source principles as I believe the whole Elastic / Amazon situation is highly instructive in this regards, at any rate none of the projects in my big projects list relies on being open source for gaining traction.
Congrats on beginning your Latin studies! Duolingo is a great place to start, and will get you off and running with conversational Latin. Selfstudyclassics is geared more towards vocabulary and constructions you might find in reading, say, Caesar. I agree that they complement each other nicely.
I don’t think that calculation is entirely correct. Hard disks use error-correction schemes and codes to prevent long sequences of identical bits, so writing logical zero bits doesn’t imply writing “magnetic zeroes” (https://en.wikipedia.org/wiki/Group_coded_recording, https://en.wikipedia.org/wiki/Modified_frequency_modulation).

DRAM = tiny capacitors, so keeping more of them discharged would mean needing less leakage and thus less energy to top them up, though, so some gains could be made there.
I think some people have a very naive view of consenting to sex.

The idea is they ask someone whether they want to do it, they say yes, and they do it. And they don't really see the harm there. Everyone's happy, right?

But, children lack the knowledge to understand what it is they are asking. Children might also agree to things they shouldn't because they want attention, even if it is bad for them, and hurts them.

Teenagers might be better off but they're hormone propelled and may make mistakes they really shouldn't. There are power imbalances too where someone feels they should do something they really don't want to do.

To be clear, I'm not for criminalizing sex where a small age gap is involved. Throwing teenagers in prison for having sex with each other is counter-productive and harmful. There are better ways to tackle that. The same applies to sexting.

But, the burden which would have to be met for an adult to be involved is so high, so risky, and so convoluted that it isn't worth it in practice. Can a judge really make the right call all the time there? Is it worth it?

By the way, he has never tweeted his theoretical support for statutory rape. I don't think he even has a twitter account. He made some comments on an obscure personal blog over a couple of decades. Someone went out of their way to dig it out after he appeared in the news.
Reddit – The Shithole of the Internet
I remember the time when Reddit actually was the frontpage of the internet. Nowadays it's being hijacked by self promoting influencers, streamers and their social media teams trying desperately to create clicks while unpaid mods are overwhelmed by the incoming amount of clickbait, reaction-crap, and misinformation. Most of the mods actually care more about boosting their alt-accounts for resale. And users seem to up- and down-vote based on opinion and not any more on content and quality.

Since Reddit is an YC offspring like HN, I'd like to suggest updating HN's usage terms to avoid this service becoming too a victim of it's own success. Maybe something where HN trademarks it's name and makes sure mainstream media won't report about it without prior approval.
At least where I leave you're not allowed to go to church and haven't been for a year. I'm surprised the numbers are this high.
Much of the canal has two separate lanes. It's unfortunate that the ship was stuck in the section that had only one lane.

I wonder if there will be a project to create a 2nd lane.
100% that second paragraph. Growing up with morals imposed on my, via the threat of fire and brimstone was weird. I did what I had to do, because I was told to do it or else.

Being an adult and doing the right thing, simply because it's the right thing, and developing my own moral and ethical code of conduct has greatly reduced my stress and anxiety.
Much of the heartland is _very_ religious. Drive across the country and in the flyover states you'll see A LOT of anti-abortion/sin billboards.
When I say abolish big religion I mean the way it’s integrated so tightly in society. The war on drugs, abortion, non profit tax avoidance, so many fucked up things stem from the belief that my religion is better than yours and you need to believe what I believe.

You can believe whatever the hell you want - but it’s not for you or society or anyone else to decide how I can live my life.
I agree with most of your argument except this:

> The reason North America, Australia, China are such attractive markets to sell into is because of their low sales tax rates.

Not really. The attractiveness is the ratio of population times buying power over required cost and effort: (P x B) / (C + E). In those markets, in most sectors, you do your paperwork once and that's it, you get access to hundreds of millions of customers, so overall the Effort factor ends up being very low. The EU has probably the highest PxB factor, but it's bogged down by fragmentation both at the cultural level (dozens of languages) and at the bureaucratic level (dozens of very different legal and taxation systems), making E much higher than it could be. Cultural differences are not going away anytime soon, but unnecessary technical ones should be slowly eroded - which is what the EU project has largely been about, under the banner of "harmonization".

So the problem is not necessarily the level of taxation. If the club is really really good once inside, businesses will have no problem paying a high "entrance fee" and following a strict "dress code". But if they also have to pay a different fee every time they enter a different room and follow a different dress code, then they will probably not come back.
GameStop stock is 'extremely volatile' leadership: Completely out of control
Colleges generally teach computer science, not programming. They're different arts with different goals.

Bootcamps teach ... I don't know, really. I keep seeing an ad to "become a developer in 14 days," and I waver back and forth between amused and angry.

I think there's room for a happy medium, some kind of trade school for software development. A curriculum that teaches you practical skills like debugging and clean architecture, and prepares you for an actual job.
We are past the point where stopping burning fossil fuels or planting trees is sufficient to meet the Paris goal of 1.5 degrees of warming. The IPCC scenarios now include some degree of geoengineering in the form of carbon sequestration: https://www.ipcc.ch/site/assets/uploads/sites/2/2019/09/SR15...

This technology is unproven- should it fail to be developed and scale then a sunshade might be on the table.
scott alexander sort of covered that.

https://slatestarcodex.com/2019/10/30/new-atheism-the-godles...
in theories these are perhaps able to replace a religions activities. in reality we are notice large decreasing in socialisation in young people and so this replacement is maybe not working so well as in theories. even social clubs you have mention are on declining also. one go to rotary or others and it is all old persons. have a shared value system is making for great connecting between persons.
> But the fact that admission to this community required total philosophical adherence is just bizarre.

I don't think it's bizarre at all. With the church removed from western society something will fill the vacuum. And truly it already has. Our society requires complete unquestioning philosophical adherence to its new religion. What happened during the French revolution? They turned the churches into "Temples of Reason" all the while lopping off the head of anyone that did not wholly and totally adhere to their new moral code. Even in the end the god of this new moral code met his fate by the monster he created. Believe me what is happening is not what anyone here should want. For all of you who are thinking and reasonable. Read the history:
https://en.wikipedia.org/wiki/Dechristianization_of_France_d...
New Data Questions Herpes-Alzheimer’s Connection
> while the other half is explained by people who still attend church regularly, but avoid formal "membership" in a congregation.

I wonder if this can be explained by an increase in people moving around compared to a hundred years ago. I am a member of the church I was raised in, but I am not local enough attend. I do visit when I am with my parents but otherwise it doesn't make sense. I wouldn't go join another church though - even though I do attend other services in my city, I am not a member at those churches
Thanks! Excellent text and excellent channel.
If we started taxing churches, what would kill them would be the property taxes. Some churches are sitting on immensely valuable property.

In my opinion we shouldn't be taxing church graveyards, we should give the buildings an exemption if they use the buildings for non-denominational community events like so many churches do, and we should definitely be taxing their paved parking lots.
I would really be surprised if anything managed by JIT was on that ship. JIT is mostly done in the last step before assembly, and even there buffets are put in place. JIT works badly with demand fluctuations (the further upstream, the worse those get in a supply chain) and supply fluctuations. And even without a blocked canal, two weeks of delay with containers is pretty common. Weather, port congestion, customs,... you name it.

It is a quite common misconception that supply chains all run on JIT nowadays.
It'd be a humongous sunshade if it were placed in the Earth-Sun L1 (it'd need to be slightly inwards, towards the Sun, to compensate for the solar wind push, which would also allow it to have some attitude control).

The good thing is that, when it's no longer needed, it can use those same attitude control sails to go towards the Sun-Venus L1 to start cooling down our sister planet.

I have the impression it'll take a long time to get rid of the rotten egg smell, but, if it's cool enough, we can hope to fixate some of the carbon in the atmosphere and cool it even further.
> Many are more familiar with the Chrome DevTools console than they are with a Unix command-line prompt. More familiar with WebSockets than BSD sockets, MDN than man pages. Bash and Zsh scripts calling into native code will never go away. But JavaScript and TypeScript scripts calling into WebAssembly code will be increasingly common. Many developers, we think, prefer web-first abstraction layers.

Every time I read something like this I realize how much in the minority I am. I am not a web developer. I have never written JavaScript before in my life. I hate working with “web-first abstractions”. I feel like it is just massive bloat on top of true native application. But given the popularity of things like electron, react-native, Node, and Deno I don’t speak for the majority.

And the thing is, I don’t know if I just learned web dev if I would love this new approach to software that is eating the world and I would “get it”. Or if it just exists because JavaScript developers don’t want to learn something new.
Suez Canal says traffic in channel resumes after stranded ship refloated
Bishop Barron had a good writeup on this in his meeting to the conference of US Bishops: https://www.wordonfire.org/resources/article/the-usccb-meeti...
Not quite. The issue is that _valid_ IPs expressed in octal are being accepted and parsed in decimal.
Show HN: Soro for Sonos – Control Your Sonos Speakers with Siri Shortcuts
Actually it does more than that. Try pinging 64465365 or 127.7575
What is a Linux distro
Using your weapon analogy, she is both "disarming" herself to the fullest extent possible and providing nukes to other nations to ensure mutually assured destruction in the event she is holding a concealed weapon. What more can she feasibly do?
By not calling ourselves "old" at 30. /facepalm
Is trading on IRC illegal? Everyone used to do that and I wouldn't call that "grey."

If they truly are interested in finding him it's straightforward and within their power, just a bit tedious.
Microstates and the European Union
One 10 years old example? Ok, I guess.
1. The link doesn't work.
2. Why do you think an USA Today article should be on HN?
My introduction to open source software was in the early 2000s as well, and I think you're right in that things where somehow different.

Perhaps it's the understanding that projects like Apache and Linux came from a large community of people, and companies, who all fix bugs they cared about, or implemented features that they need. If someone else could benefit from the work you where going to do anyway, then that's wonderful, but it's was something you did because you needed it.
Depends on the library in question. I don't think that lodash doesn't get enough eyeballs on it.
With the help of a team of tugboats and a high tide.

https://youtu.be/Msob1cxFWJw
> A digital silicon machine instantiates a mathematical formula with an oscillating electric field

Exactly! That is exactly what is done by a neuron, the brain building block. So I hope you can see why I think an AI can be close enough to simulate the brain, as we still not know the exact border of intelligence (and thus we may be closer than we think).
You can dig a hole in Yellowstone and blow up a large nuke to cause it. Fusion bombs don't have the size limitations of fission ones and you can make one whatever size you need.

Of course, we should probably evacuate North America before trying something like that.
but why would you test that so obviously ('fix typo' but add code)? and they made it clear that they likely had access to the git server (by pushing 'from' different accounts), which (obviously, if that's what is actually happening) can kill their access
Did any of the competitors do better?
> Developers chasing their tail writing clever programs to read spaghetti code instead of not writing speghetti code.

If a codebase is in development long enough, the probability of spaghetti code approaches 1.

Also, some of the spaghetti I've had to fight through wasn't my fault, just my responsibility.
I would much prefer music notation where time - the duration of notes and rests - was indicated by space, rather than symbols.

That would be one less thing to decipher.

(This website does not appear to cover that option, considering this undesirable)
Not sure if you are being sarcastic, but anyway I laughed out loud at your message. Thanks!
Site's dead right now, probably the HN hug of death...

"Many people struggle to learn to read and play music, and many give up before they become proficient. Could a better notation system make reading, writing, and playing music more enjoyable and easier to learn? We think so."

http://webcache.googleusercontent.com/search?q=cache:c2PdCem...
They choose politics.

https://www.economist.com/united-states/2021/03/27/religious...
Well, we could just ‘appeal to authority’ on things but then why have Hacker News, where intelligent people can come and discuss things?

As for this specific question, it’s the same thing people said in 2007 about mortgages: “these are experts - what makes you think they haven’t adequately considered the risk?”