skysight-inc/HackerNews huggingface dataset:
The most common vulnerability that grants RCE has the attacker exploiting poorly designed deserialization code. Those are high impact but not too common since deserialization is hopefully closely scrutinised.

There are other problems that naturally fall out of the fact that by default all objects, including those from JSON.parse, inherit the Object prototype though. For example -

- If you store user membership or permission as an object with some user controlled identifier (eg. a username) as key, then check if a user is permitted at all with `username in permissions`, a user can name themselves hasOwnProperty to bypass the check since it is part of the Object prototype

- If you deserialize some JSON then try to check membership with `o.hasOwnProperty(someKey)`, a malicious user can pass in JSON with hasOwnProperty as key. This will crash since hasOwnProperty is no longer a function on the object.

These are not necessarily common, but it’s annoying how easy it is for these to slip through. The object prototype in general is just a massive footgun
> AGPL virality is overbroad

Going against interest of Google (and similar companies) is one of main points of AGPL, so this indicated that it works as intended!
Runnaroo Still Works.
On twino you can get 10% guaranteed for loans. And the only risk is the company goes under, though they've been running for years.

It seems like in both the cryptocoin case and fiat case, the risk is priced similarly.
Many places in the world you pay a tax for inheritance.

For 100% (or otherwise significant) inheritance tax, the issue is how to implement it. If you know it's happening, you'll just gift what you own to the preferred recipients before you die. If gifts are also 100% taxed, you sell your property to them (and then spring up a company and hire them to do "work", so they get the money back). If sale of property and work are 100% taxed, well, it's a very different kind of economy.

100% inheritance tax only hurts when someone dies unexpectedly. Others will be prepared with workarounds.

Where I live, both inheritance and gifts are taxed with very similar rates. Also, selling things under their market value is considered gifting (which sometimes gets interesting, for obvious reasons).
Not all smart motorways have the hard shoulder thing, the ones that do have semi frequent "stopping bays". However, stopping in one without contacting the support staff(there are intercoms) or a good reason is an offence.

They all feature per lane adjustable speed limits, as well as linked speed cameras at frequent intervals. This is supposed to help ease congestion by adjusting flow in certain areas.

In practice random signs are often left on the wrong setting, so you get a speed reduction to 40mph for 250m. Or a lane is closed for 6 miles with no reason.

I've no doubt that in the scenario where there is congestion that it greatly aids safety, as approaching traffic can be slowed before they reach the affected area
No, that means that now they have a reason to take all of his money. Just pure greed.
Not every company adheres to the work from home order here in Belgium. Office workers are pushed to come to the office, and I see a lot of traffic on the roads, almost pre-pandemic levels. As fat as I understand, the number of decision-makers who don’t believe in remote work is quite high.
On every #include line in C, I like to write a comment, listing every symbol used from that include file, in order of first use. I even wrote a Python script to help me re-generate the #include lines for such a C program.
> If male == can sire children and female == can bear children, then infertile people don't have a sex which is nonsense.

Your conclusion is nonsense, the premise is not. A broken computer is still in essence a computer, even if it can't actually do any computing as a result.

> Yes, it would. Humans only usually have 5 fingers on each hand. But it isn't important to emphasize that there are 6-fingered humans because no one denies that 6-fingered humans are humans to start with.

It's some kind of genetic disorder, an anomaly. With your standard you can't describe anything, as almost nothing is true 100% of the time.
The Shortcuts app can already hook into Find My, adding an event for "item found" is not a big thing for Apple to add.
https://www.youtube.com/watch?v=sFE1232LxWY&t=129s
We wouldn't even need to discuss this if only Apple supports target mode.
Hmm not to my knowledge but that's a really interesting structure and I will definitely see if Switzerland has something similar.

Thanks for the tip!
Yep, has been active since iOS 13 I think.
The death statistics for smart motorways are misleading because most of them are very busy motorways with speed limits of 40/50/60, while regular motorways usually have a speed limit of 70.

You can't exactly compare death rates per mile on fast and slow roads and be surprised when the slow roads are safer.
Another e-waste to pollute the environment marketed as eco friendly.
Same here. If this had TDM, this would be an auto buy for me.
What do you mean? Any free software licence allows forks, including AGPL.
It's a bluetooth beacon, devices see it, send its ID to the cloud along with the location.

(+ privacy and encryption ofc)
How Diffusion [audio] Works
This would also reduce the amount of received legal process from LE agencies, since data is not accessible by Apple.
A comparison of data processing frameworks (2020)
I think they’ll remove the chin eventually, but probably need a new (thinner) screen technology first
And they’ve been blocking roads with highly disruptive roadworks for literal years to “convert” them
GP said SSPL is debatably not open source, not AGPL.
Car, bicycles, wallet/keys, backpack.

I'd install one in my grandma if it could be implanted :D
>but there is a lot of room for creativity as the genre isn't very well defined

>I'm still not a great musician

These two statements might be connected. Great musicians redefine or create their own genre. Followers are constrained by the existing definitions.

You play synthwave on a banjo? That sounds pretty creative to me.
CBN in a new guideline restricts banks borrowing from SLF to overnight repo
Except there are still no overseas travel, and there probably wont be for years.
You don’t need an ORM, but (unless you’re a total masochist) you probably want _something_ to smooth the interaction with SQL.

We have a TypeScript Node.js API in production, and we wrote Zapatos to be that something: https://jawj.github.io/zapatos/
I don't know what to say, the comment section is kind of disgusting. If you like it buy it, if you hate apple then don't. These kinds of discussions got very boring ages ago.
Of course. Even the Space Shuttles blew up, twice. I'm guessing even pace makers and software in nuclear power plants have bugs. The point is, these things are exceedingly rare or have very limited scope (occur only in most obscure corner cases and also do limited damage), while in web companies which adopted Continuous Deployment, serious bugs are just common and I think seen as part of life.
The surprising story behind the Apple Watch's ECG ability (2019)
They'll still have all the Android users :)
Thanks for the explanation, although I could have done without the condescending tone.
They don't need to combine that data with your identity. The client IP address does that when the records are produced, as each Apple device sends hardware serial-linked data to Apple nearly constantly, like a supercookie, linking that device (and user, as they have the device purchase records) to that IP.

Whether Apple runs a join on this data in their databases or not is irrelevant.
Deliberately creating a safety hazard is much worse than someone who is inattentive.
European here, who has clocked up about 3.5 years of living in New England: in cosmopolitan areas, I didn't see much racism against what I might call "melting pot" ethnicities although I heard of some, but I often saw and heard of racism by middle-class Americans against American blacks, including by white fellow students of a black Yale undergraduate. I think that racism in the US is very much a two-lane thing.
> if your rent you probably spend less on rent

For a while, usually yes. Long term, no chance.

A mortgage can only ever go down. Rents most of the time only go up.

My mortgage was initially over 3K while rent had been ~1.5K. But years later, those equivalent rents are ~5K and my mortgage is under $1K. In a couple decades when I'm retired, who know how high those rents will be? But I know exactly what my mortgage will be, $0.
Not essential, but enjoyable for many people. And they’ll push their agenda.
The nice thing about the All-In-One Macs was always how portable they were. The Mac Plus, the Colour Classic, the all-in-one Quadras, and every previous version of the iMac -- just a single box, a standard power cable, a keyboard and a mouse.

It was always a lot easier to move them around than the PC towers everyone else had. Apple even ran an ad once that showed how few cables iMacs had in contrast to a typical PC.

I mean, it's not a huge difference in portability, but it's an Apple product -- people obsess over details like this, and they pay a premium for a product that gets it right.

Also, it's nice that you can hide the external PSU in your setup, but often that's not easily possible. Eg. if you have a minimal setup with a sleek desk, there's just no place to hide the power brick. Or if you bring the computer to the living room to watch a movie... I mean, there's lots of ways to use this computer, and the external PSU is just optimized for one use case.

And it's made even worse by the fact that many people are going to end up having to attach an external hub with an extra power brick since this iMac severly lacks ports.

EDIT: And you can see that Apple doesn't like the PSU since it is conspicuously absent from their marketing page. Even the "What's in the box" picture hides the PSU: https://www.apple.com/shop/buy-mac/imac

They know that (some) people don't like power bricks.
In the UK pro-inheritance folks like to call it a "death tax" and argue it'll rob people of the ability to pass things along to their children. The debate is caustic and unpleasant to say the least.
Data seems to be quite old, since it does not include e.g. OLED TVs.

https://manuzoid.com/brand/LG
This is probably more of a Windows problem than a .NET/C# problem, but it's a very real problem.
Microsoft and other large tech companies hire a lot of devs. You should apply to postings. Even if you don't get interviewed, your resume might be noticed by other company recruiters. Amazon recruiters do this a lot. Also, a security clearance will make you more attractive for certain positions at MS.
The software in your washing machine begs to differ.
> Is that helpful?

Absolutely. It made my day. Thank you.
Hey, your first statement is true but your second is not.

The disk engine does store data in memory which is part of the design. You wouldn't want to use a database that doesn't utilize caching.

The last benchmark panel, https://raw.githubusercontent.com/scottrogowski/mongita/mast..., shows cold starts where I test it without cache. So in that, it does hit the disk.
Everything from iPhone 6S upwards will work. Basically anything with iOS 14 or later.
All the sample photos are obviously photos that were originally in good condition, but you added the scratches, unwanted objects, etc. on top of them. This of course makes it very easy to show a before/after, but feels like false advertising. Use real photos, even if they are cherry-picked.
That is correct, the same problem exist for current antibiotics which are generally considered safe
Sqwok looks amazing :)
We used this at a previous job of mine, back in ~2014.

It was part of a huge push where we spent months focusing primarily on code health and performance. The guy who did this part of the work said it needed a bit of manual intervention to really work, back then, but in the end it helped us eliminate a lot of includes and really speed up compilation.

The very measurable gains also led to new guidelines for how to write our code to try and maintain the speed we'd gained.
Additionally: I have this beautiful device with great computing power but I can't install my favorite extensions on its browser.
Roads are hideously expensive - but smart motorways aren't just wifi enabled signs: there's traffic/weather detection and then the control systems behind adaptive traffic lighting/speed control - and those systems have to be reliable and maintained.

I haven't seen recent statistics/costs but remember that the cost of the converting the M42 in 2006 to a smart motorway was £9M per mile, creating a new lane would have been £16M per mile.
I think you’re missing the context. Clearly we have evolutionary structures that provide a language affordance. We can see the manifestation of similar, less complex such structures in other vertebrate species.

Chomsky says there are universal, physiologically-based manifestations which are universal across humans. That is not really demonstrates but would not be surprising any more than the universality of the human visual system (as well as individual variation).

He claims to have identified some such universals, and that they are relatively high level. THAT is a bold claim, hard both to verify or falsify. But in principle not absurd.

I don’t believe it, but I no longer mock him with the phrase “grammar gland”. There is some insight there.
I’m pretty sure the whole travel industry is pushing for opening the borders as high as it can. Some European countries open up despite no improvements. And everyone knows international travel is the real money-maker. Israel is going to be open in the next months for that matter.
I don't think you're doing a very good job of advocating for this person; if you were arguing this way with someone else on my behalf, I'd ask you to stop.
How do you install Java? First thing you'd do is download the JDK. Is the JDK a language? No, it's not.
Word on the block is that there is a RFC to add support for secret types in LLVM, and Rust is waiting for them to also provide it in Rust [0].

[0]: https://github.com/rust-lang/rfcs/pull/2859
The digital scarcity argument made in the paper is weak.

And that's assuming the ETH crowd doesn't change the supply formula (which no one currently understands) on a whim.
Stalin's mysterious death (2011)
That's a lovely viewpoint to be able to take about one's own priorities, but one that's hard to sell to the person at the entity, ultimately paying all your bills.

Yes, people should relax a bit, but those incidents you cite did cost those companies customers. That's okay for Amazon. But a small B2B service provider can't as easily absorb the loss.
Lots of supposedly liberal states had Black Laws.
That's pretty bad, but nonetheless you detected and fixed it very quickly. Compare that to lingering bugs in Twitter iOS client (it's just broken on iPhone 5s, I guess they simply don't test on that device anymore), or happy random bugs in Windows 10 that appear after they CD an update on their users.
Carbon tax is nit really a tax, but a patment for someone else to clean up your mess (released co2).

And at the current prices it doesn’t cover even 20% of the cost of removal of co2, not to mention the environment destruction.
> In a lot of cases when renting these are taken care of by the landlord.

Approximately never are any of those costs taken care of by the landlord! The renter is paying for them, plus a profit margin for the landlord. That's what rent is. The landlord isn't running a charity.

Only exception is if you luck into a rental by someone who paid off the property long ago and doesn't care to charge market prices for it.
Flux2: Continuous Delivery for Kubernetes
Someone's working in both cases. In the case of inheritance it's the person who gave the money in their will. That person also already paid tax when they earned the money in the first place.

If anything I think we should encourage rich people to give their money away (even if only to their children) since wealth consumed by a broader number of people leads to more happiness than if it's all consumed by one person. It's better for a $10 million fortune to be spent by 10 consecutive generations than for it to all be spent by the original owner.
Introducing a safety hazard, likely to cause further issues, when vehicles are traveling at speed, with nowhere else to go. Good job on suggesting one way to make things much worse.
Case in point: https://www.independent.co.uk/life-style/gadgets-and-tech/fa...

Discussion: https://news.ycombinator.com/item?id=26879315
A GPS collar and this are two very very different things. An AirTag only works if an iPhone is nearby - if your dog is lost in the woods so to speak, an AirTag will not help you - a GPS collar will.
I'm honestly baffled by how "dumb" driving still is, in 2021. Most people have smart phones in their cars but the cars themselves are dumb!

The obvious idea in the future is to allow cars to communicate themselves over a network and allow themselves to avoid actual danager - removing human control will save so many lives.

We'll look back in 100/200 years and think we were insane for allowing humans to ever manually control a car.
s/Alabama/Arkansas/g but the point still stands!
I bet you could have fit both on the same connection.
As someone who drives a very small car (Peugeot 107), I always feel a little on edge on smart motorways in a way that I don't when there's a hard shoulder to stop in should something go wrong.

I'm not sure how large each "block" is, but even if it's something like a mile, if I break down and have to stop that's still an awful lot of cars and lorries that are already in the block behind me that need to see me and move over before people further back are routed into the next lane.
If I type something on my keyboard, and as a result a computer at the other side of the world performs a computation to give me an answer, then I am definitely running software. Else you could say that the only software you're ever using is your computer screen, keyboard and mouse's firmwares - it's just making requests via a protocol (usb) to a cpu "somewhere" and the CPU answers on the screen via another protocol (hdmi)
Cannot confirm - it just takes a while to show. You can still press Esc which is what most users might do when panicking.
If your cat is walking freely around the streets of Palo Alto, there already is a hazard you're accepting.

Adding a $30 device to your cat doesn't make the cat markedly more at risk.
You know about the concept of exponential growth / hockey stick in startups and tech, right?
An indefinite obligation is unreasonable, I'd ask them to reduce that to 2 years.
It's quite something else to monitor the processes that have been launched from the application itself than to monitor all processes that run on the host system.
Fair, adios. Would appreciate if you actually respond to subresource integrity question. Why isn’t that valid? One could couple this with a CSP that restricts eval and Function or what ever is necessary. This all seems to be just about browsers in general.
That is possible, but we're talking about different time constants here. Antibiotic resistance can arise in a few generations. Evolving a different membrane composition that will block that particular toxin and not the other ingredients the cell requires to function (amino acids, carbohydrates, etc), is much less probable to take place in such a short time
GP seemed to use “taken care of by rhe landlord” to mean “bundled with the rent, and not a separate fee on top”, which is relevant to cost comparisons based only on purchase/finance cost vs rent cost.
Do you people even read the linked articles?

Here, I'll paste the relevant part for you:

"AirTag is also designed with a set of proactive features that discourage unwanted tracking, an industry first. Bluetooth signal identifiers transmitted by AirTag rotate frequently to prevent unwanted location tracking. iOS devices can also detect an AirTag that isn’t with its owner, and notify the user if an unknown AirTag is seen to be traveling with them from place to place over time. And even if users don’t have an iOS device, an AirTag separated from its owner for an extended period of time will play a sound when moved to draw attention to it. If a user detects an unknown AirTag, they can tap it with their iPhone or NFC-capable device and instructions will guide them to disable the unknown AirTag."
I’m trying to schedule a regular meeting with a guy in South Korea. With a 7 hour difference it’s always such a hassle.
Same experience here. I installed a key hook so where my keys are is now known but I'm gonna have a hard time finding my wallet when Tile's battery run out.

Same for street navigation. Whenever I drive somewhere I usually can't afford to waste time learning the roads but on my way back I close Google maps and try to find my way back home which helps.
SponsorBlock – Skip over sponsorship segments on YouTube
No, why would it be? It requires Apple devices to detect and Apple's servers to coordinate the data.
Instead now we get millions of CR2032 batteries thrown into the garbage each day :/

Anything with non-chargeable batteries is a no go from sustainability perspective
The WPF grids are fine and autocompletion is trivial. Which is the proper way to write frameworks: make it easy to make the bits you don't have.

I love that it isn't created like the old RAD frameworks where you are supposed to easily drop a datagrid in, connect to a DB and basically have some Line of Business CRUD on your screen within minutes. The Telerik/Syncfusion et.al. components are massive bloated and geared exactly towards that, and in order to do that they need to make a ton of assumptions about the MVVM/MVP/whetever architecture of the app. There are a few small omissions from WPF but I wouldn't say that the huge suites from Telerik and similar show that it's lacking.
Enhance your front end state management with view models
None of the these devices are real-time or have any deterministic latency for communication. It's very far from a trivial issue.

The entire idea is very futuristic.
Yep, a somewhat related example is how statistical analysis of Mendel's seed data [1] revealed that some bias crept in because its too perfect. In Mendel's case he was right about the genetics of inheritance (and the bias likely unconscious), which goes to show even when we're dedicated to the truth our capacity for self-deception exists.

[1] http://blog.thegrandlocus.com/2016/04/did-mendel-fake-his-re...
In my country: banks (online or not)

All major IM platforms (WhatsApp, Signal, LINE)

Any dating app I ever tried to use
You'd think so; that is an old narrative.

But right now I know of people who are burning the midnight oil due to all the red tape introduced by Brexit.

Empirically, it turns out the EU might actually have been an engine for the reduction of red tape all along. :-/
The Limits of Eventual Consistency (Comic)
They do? They charge me an annual subscription for that.
My pet peeve is people asking questions on internet forums and not spending even 60 seconds trying to find out the answer for themselves.
The phone will die in one day, Apple tracker will live for an year (I believe)
I still don’t follow that. If engineering still exists the philosophies still exist and the interview mentions what could be interpreted as the forking moment in the 1960s. By which time I doubt a subtle emphasis shift like the one suggested here would prevent general purpose computing from continuing.
The problem isn't "some code which different services use is in a library".

The problem is an not-ideal "the code which is in libraries shared by different services is tightly-coupled to particular services". e.g. changing the shared library might break some service which depends on it.

Obviously, you don't want code like that. But it's easy to write code which is slightly coupled; and then when you're in a hurry, to increase the coupling.