skysight-inc/HackerNews huggingface dataset:
Choco | DevOps Engineer, Senior+ Backend Engineer, Engineering Manager | Berlin | On site (relocation assistance) | Full-time

About us: We're digitising the global food supply chain to make it more sustainable.

DevOps Engineer: We use AWS exclusively which means our challenge is to provide a good developer experience and business value. Some Lambda curiosity would be good as well as Observability and Security but we will have work across the stack.
https://choco.com/position-details?gh_jid=4438046003

Senior+ Backend: Help us scale up and out and propel the engineering team forward. Stack: NodeJS, GraphQL, Lambda.
https://choco.com/position-details?gh_jid=4216795003

Engineering Manager: We have fully cross-functional stream aligned teams where you will have a top notch first-team who have worked on building the company to this point and who are eager to get things to the next level.
https://choco.com/position-details?gh_jid=4214710003

For more details see: https://choco.com/careers
What is the point of sanitizing input in JavaScript? One could easily bypass that and still put nasty stuff in the input.

I think this is a bad idea, I just know there will be people who will make applications that will rely entirely on this API with disastrous results.
not much experience in this space: who would use this patent? I see Samsung and Intel as partners; do they simply use IBMs research with their own manufacturing to produce this?

Also curious if this development will affect apple silicon or TSMCs bottom line in the near future
Typesense vs. Algolia vs. Elasticsearch vs. Meilisearch
Android devices are actually quite locked down these days it's just that you CAN shut off security features.
For example I can't just download APKs in Firefox and install them without flipping a switch which triggers an explicit warning.
Agreed. After seeing that video, any time I'm in a crowded indoor space, I always make sure I take a look around for the nearest fire exit, as well as a couple of alternatives in case it is blocked.
Putting an Ultra-Tiny Linux Board in a Phone Charger Eventually
You would sanitize it on the receiving end
They're still not stacked, as far as I'm aware - still needs to be in a "well" on the substrate.
1988: P.r.e.s.t.a.v.b.a
From Wikipedia:

"A private message, personal message, or direct message (abbreviated as PM or DM) is a private communication channel between users on any given platform. "

They are all private in terms of intended recipients. They're not cryptographically protected.
I was afraid of using tcpdump until I learned that the ip and tcp packet has a very specific structure. I had to use tcpdump+wireshark for debugging recently and it felt like having a mini-superpower.
Wait why does the second example remove <blink> but the first one doesn't? (with apparently the same default/none configuration). Any rationale behind this? I'd expect both to return the same HTML, just in different formats (string vs DOM nodes)
Nintendo Announces Game Builder Garage, a Cross Between Labo and Dreams
The front-end tends to use optimistic updates more and more, meanings the user's input is directly used, wihtout passing by the server. I guess that's one of the use cases.
>I stopped eyeing for cpu advances a decade ago

So have you completely missed the huge advance of ARM that you have in your phone now?
Gleam 0.15
Yeah, I think that's some kind of typo.
Elon Musk Is Maybe, Strangely, Going to Do This Mars Thing
Yea, it doesn't matter how much you hate the guy. A political party making a demand for compliance to a private company is an extremely dangerous road to start on. Sure it starts with the politician you hate, but it'll eventually happen to the politician you like.
Or if you work with a CMS and you don't trust them to not allow script tags
It might just be that they don't make it on the news where you live. They certainly happen:
https://en.wikipedia.org/wiki/List_of_earthquakes_in_the_Uni...
I would much prefer to treat visidata as a programming language in that regard :)
Explain "easily bypass"?
Morphing Pasta and Beyond
Interesting table showing millions of transistors per mm^2 there. Is Intel’s 10nm really having more transistor density that TSMC’s 7nm? This could mean some big things coming from AMD moving to 5nm next year!
I absolutely agree with your points, but at the same time we can only worry about a fixed amount of things, and stress is very unhealthy — so from a purely mental well-being point of view, constantly thinking of all the bad things around the globe is not a good thing to do. Especially when we have a hard time actually effecting the given thing.

I don’t know what should be the solution, perhaps it would be the task of elected politicians to try to fix the problems in place of the population, even in other countries? Which do happen, but it should be much more prevalent.
I don't know, lately I've been thinking maybe there are plenty of eyeballs and there's just too much code. Do things really need to be as big and complicated as they are?
ok so, those definitions were not tacked on afterwards, they were really the reason for the Constitution to be written in the first place. What was tacked on afterwards was the Bill of Rights.

The reason for the writing of the Constitution was the Articles of Confederation https://en.wikipedia.org/wiki/Articles_of_Confederation being rather problematic for running a nation.

In fact for any judge familiar with the Articles of Confederation and the history thereof, which I would hope was every judge, the interpretation of the paragraph you cite would be completely obvious and pertaining only to the states, because some of the original problems between the states that caused the Constitution to be written was states doing such things as entering into treaties with foreign nations, coining their own money (making trade between states more difficult than needed), etc. etc.

Basically the paragraph is saying "all the stuff you guys were doing or maybe thinking about doing, stops now!" - I say "maybe thinking about doing" because unsure about letters of Marque although I could certainly see it having been done by some of the more haughty states at the time - say New York or Virginia.
Depends on the construction. Older holes used plaster and lath. Modern dry wall is pretty good at dead ending sound as well.

If there’s an issue with sound then you can install dampening material in the wall or floor.

You’re more likely to have noise travel through vents though.

In some places with high humidity though you want the home to breath to prevent mold, etc. Otherwise it gets damp and stays damp.
Of course Apple wants their cut, but you know offering services and getting paid is not a dirty thing, is it?

Everyone keeps talking about how they "intentionally hamstring PWAs". They kicked off HTML5, remember? They shipped the first real web browser on a phone, remember?

Now they chose to implement some Google-pioneered APIs selectively to preserve UX, performance and privacy and everyone is up in arms.

As a web developer I never felt Safari lacks something I really need. As an app developer, Swift is possibly the best dev experience I've ever had, next to C#.

All this is about letting people comfortable hacking everything in HTML to make "apps". Well I wish I could contribute to the Linux Kernel with my HTML apps, why not? Why is Linus hamstringing PWAs, ffs. /s
How fast is that thing at HTTP serving? For example Python v3.x ThreadedHTTPServer can do 1,000 requests per second for hello world so 30% faster isn't much faster. On the other hand, redbean can do 1,000,000 requests per second on the same machine using a dynamic Lua handler. https://justine.lol/redbean/index.html redbean was also the top #3 show hn thread of all time. https://news.ycombinator.com/item?id=26271117 Lua isn't that much different from old Python. I'm also considering integrating js and scheme into redbean too, so people can have options in terms of personal aesthetics and programming taste when they achieve that million qps. For example, Fabrice Bellard's JS engine has already been checked-in to Cosmopolitan and it actually benchmarks faster at ECMAScript test262 than even v8 if I remember correctly.
> docker uses the same kernel/glibc as the host

Docker containers usesthe same kernel as the host, but the libc comes from the container.
It’s a lot easier to verify that content is safe if it’s sanitized close to where it’s used. Otherwise there’s some degree of trust involved.
It's worse... because even if you up the difficulty there are only two outcomes: you either have good enough gear to survive or you don't. There's nothing you can do except grind for better gear.
There are 2 options for buying the product, yes. It's the same product, so it can be remotely deactivated regardless of which option you selected.
Hey Yev thanks for the info! Yet more transparency from Backblaze!

Thanks for a great product. I've signed up so many people.
If robots are doing all the work, why would landlords be paid for anything?
For anyone wondering why this is done like so instead of literally counting transistors:

Transistors with 2,3,.. gates are functionally identical to 2,3,.. transistors connected in series, but take chip area that is only a small fraction larger than 1 "normal" transistor. Counting those as either 1, or as multiple (by number of gates) would skew stats in a less-then-useful way.

That is - among other quirks. Ken Shirriff [1] has some excellent articles that touch the topic of what exactly counts as a "transistor".

[1] http://www.righto.com/
That’s not easy information to get. Startups pay a lot of money to do a “freedom to operate” study to see what patents are out there and who owns what. You can pay companies for high level info, but it’s not easy at all.
I didn't think of that. I assumed the backend would already have sanitized it.

Either way, I think there should be a warning that it should never be used for input sanitation.
Indeed I don't think so. ProcMon uses a kernel driver for the event tracing.
How Cities Will Fossilise
While I get the utility of push notifications and part of me likes the idea, it will get abused in the same way it was on desktop where every second website asks for permission to send you notifications or install a PWA to be able to do so.

I suspect Apple has internally discussed it and concluded that it would too likely be abused and result in a poor user experience.

Also, Apple deliberately does not like background connections for battery saving reasons which is why everyone is required to use their push service, meaning iOS maintains a single energy efficient connection instead of each app maintaining their own TCP connection which may have no regard for energy efficiency.

I acknowledge it's possible that they don't want to remove reasons for people to rather make native apps, but given the other reasons, it would not be my first guess.
Covid: US backs waiver on vaccine patents to boost supply
For people saying this is a bad idea to do on the front-end, I believe it's a great idea to have this as a standard. Generally, the process in the past has been:

1. Library that does the heavy lifting

2. Front-end catches up by creating a new standard (seems like https://wicg.github.io/sanitizer-api/)

3. Node.js implements these native methods, unless it did something similar but actually different between 1. and 2. (and then we are in a mess).

4. Now you can use this everywhere without depending on random libraries.

So hopefully with this coming to the front-end, it means that eventually we'll have this functionality native in Node.js at some point in the next 1-3 years!

This has been similar (though not always 1-to-1 like desired unfortunately) with many things like promises, crypto, web workers, etc. I am still waiting for native Node.js' fetch().
I don't want a choice to accept or deny it. I am utterly fatigued of choice. I want no push notifications and no reminders that push notifications exist.
That is a fair point.

Also for sites where JS is not required but is used to enhance interactivity a note to say that the difference is with/without JS would be useful ("without JS this site will work, but be slower due to more round-trips to the server" or "without JS this site will be less pretty") then you can choose if you care enough about the difference.
UFO stuff seems mostly driven by the west, wouldn't be surprised if it was just a psy-ops. To get some more defense funding for the space force.

If you can generate almost infinite energy to cross deep space to probe some humans I'm not sure I would take such an alien race serious. It would be more like how global factions on earth fight over resources, so I subscribe more to the Dark forest view of things. If they reckon crossing deep space is worth it, they will come over here to invade not to probe and troll farmers.
The Dutch Tax Administration have been using controlled natural language for the specification of their legislation for some time now with JetBrains MPS (external) DSLs: https://www.youtube.com/watch?v=1pfABlzO2Wc&index=2&t=0s&lis...
I'm still waiting for this new persistent memory IBM had. But anyway, I'm happy to see this density is even possible. Exciting times ahead.
I do! See my comment posted a bit after yours, regarding the relation between "subsumption" in your field and mine :)

Edit: nice work btw!
Explain that your work product will be the same regardless of where you live, and that your personal expense choices are your business, not theirs, so you will not agree to a pay cut.

This will fix your situation, one way or another.

I’m get the feeling that developers don’t recognize that these things are negotiations, and just accept whatever they’re told without any pushback. But there are two parties here, and both of you need to agree to any changes to your contract.
This is the correct output of the first example, confirmed in real Firefox (note also the two spaces near the end):

"Some text <b><i>with</i></b> tags, including a rogue script def."
You're going to find opinions you don't like on sites that aren't censored. It's odd to me that you find that surprising or frustrating.
To clarify, I was assuming this was going to be used for input sanitation. If it were used for that a malicious actor could see where a form or XHR call would post to and simply post the raw input to that endpoint, bypassing any sanitation.
yes, intel 10nm is similar to tsmc's 7mn. Unfortunately for Intel they have struggled to produce any non-low-powered chips on 10nm. That can be alleviated by not cramming the entire area with transistors.

Overall the numbers of "X" nm mean very little
> I missed the glory days of hp-48 (plus they never seemed very popular in Poland)

Is that true for the earlier HP's too?

> Ever since then, I keep an emulated HP48 with me.

Oddly, even though I used 48's and still have a couple in a drawer, I've settled on an HP42S emulator. (This was a lower end, but still nice, HP that was more directly a successor to the 41. In some ways, it feels more direct and calcualtor-like than the 28/48/etc series)
I remember seeing that video of American special forces being shot down in Africa. I did my due in the army myself, but thankfully I never saw combat. I do know a lot of vets, tho, and... they've all got PTSD and many of them are in a very bad shape. After seeing that video, I've been even more thankful. For me it serves as a clear warning that joining the army isn't all glory, even if you're fighting for "the right side" or the most powerful army in the world. Also if the war is on the other side of the world, perhaps ask yourself if this is something you'd really like to give your life for.
This feels an awful lot like we're going full PHP[1]. Can't this just remain as a library someone else could implement?

[1]: https://www.php.net/manual/en/filter.filters.sanitize.php
GRUB2 works fine with /boot on ZFS, however GRUB cannot detect ZFS dataset with native ZFS encryption (see bug[1]). The best KB right now is probably OpenZFS documentation[2] and Arch Wiki[3].

I've been using ZBM since its inclusion in void-packages. It already does everything I wanted it to, but I don't think its usage is widespread outside Void Linux community just yet. Being dependent on Dracut might be one of the reason why (I believe Arch is still using mkinitcpio). There's installation instruction for Void and Debian Buster on ZBM GitHub[4]. I used to have a separate ZBM root for void-musl and void-glibc which worked quite well (though I'm now running only void-glibc due to Nvidia).

[1]: https://savannah.gnu.org/bugs/?func=detailitem&item_id=58270

[2]: https://openzfs.github.io/openzfs-docs/Getting%20Started/ind...

[3]: https://wiki.archlinux.org/title/Install_Arch_Linux_on_ZFS

[4]: https://github.com/zbm-dev/zfsbootmenu/wiki
There is often a need to sanitize user input that never goes to the backend at all. There are backends you don't control but from which you still need to fetch resources from and present to the client. And if this API becomes part of an JS engine, than you will be able to use it on backend as well
Ummm, the durability of wood is way longer than you’d think. My family lives in a three-floor wooden house from 1760, and it’s showing no signs of decay just yet.
As long as you replace the facade/roof tiles when needed (every 50 years?) and don’t get water into the main walls, a wood building will last for a very long time. Fires excepted, ofc :)
If you're talking about the game, then there is the option to use tcpdump directly on the client.
A solid set of changes and incredibly well presented for digesting what changed and why - congrats on the release!
I also think that Twine/Client-Side-JS isn't the worst choice here. It takes unnecessary load from the server and is easy to use, at least for the one creating the game.

It's just so frustrating to watch how having loads of Javascript on websites that absolutely don't need it has been normalized. I don't think people should be blamed for using Javascript (or Electron, .NET, whatever), especially for hobby projects. But I also think users shouldn't be silent about it, especially since there are young developers who actually don't know software could be better. It's just such a massive waste of resources and breaks accesibility way to often.
There are people who work just as hard, if not harder who don’t escape terrible situations. If you don’t believe that I don’t know what to tell ya.

Your cleaner lady is such a silly example. If she was deported would you say she didn’t work hard enough to prevent it? Lol

And even if they did work hard your situation is entirely luck regardless since well, you didn’t help them escape with your hard work, yet you benefited.
>Don't take the metro it's inconvenient

This is why I don't like driving.
> don't forget that the form change was done with hp49,

Good point - I keep forgetting that one. (In fact, now that you mention it, I think the 49 may have been the first output from the reconstituted calculator team.)
I think I was expressing surprise that there isn't a mature infrastructure for this. (Thank you for introducing me to Gatsby)

You could turn it off if and when you face any bandwidth limitations - if it was a mature system, then you could turn it off globally in the browser.

Intermittency can be overcome with the right technical approach. It's potentially great for intermittent connections, since it can pre-download materials whenever your connection is good.

I guess it won't be supported between different sites, because it introduces risky conflict between tracking and privacy, that hasn't been legally resolved. (Any external link creates a privacy/tracking/security/authentication hole, whether the user clicks it or not). Maybe that's what has ultimately prevented wider adoption.
Why Does VPN Not Work When Logged In as Root?
OK. I know the whole "Don't log in and work on your computer as root" mantra. So spare me that. It's not something I ever do. However...

The other day I had to login to my laptop [OSX] as the root user to change some protected system settings. Whilst thus logged in, I went to look up some info online. So fired up my browser which automatically triggered my VPN [Windscribe] to connect...

or rather to fail to connect, as I couldn't connect to the internet. I then tried Opera with it built-in VPN and that wouldn't connect either. Then Tor. Again, no joy. And, finally, Brave with its 'Private using Tor' tab. Also no connection.

So, not that it's anything I'm likely to be doing again. But I am curious as to why it doesn't seem possible for VPN to make a connection when logged in as the root user. Just to be clear, I had no problems connecting to the web via a 'normal' connection, whilst logged in as root.

BTW: I also tried launching the VPN app from a terminal where I did a `su <normal username>` first and that didn't work either.
If it’s part of browser, then it’s likely up-to-date with the latest features and quirks of the browser.
As if "computer says so" wasn't bad enough already.
Where they sued to oblivion or something?
It's not quite inspired by the Sysinternals tools, but I'm working on something like this for macOS. An early beta should be released soon™ (read: when I stop procrastinating on polishing some of the last important bits I want to finish before then).
> As a result, people are now coming in to their doctors with prostate cancer at stage 3 or 4. Might be the right choice for society, but the wrong choice for the individual.

Hypothetical Bob is going to die when he's 78. We can tell Bob he has prostate cancer when he's 76, or when he's 70. Telling him does not make him live longer. But telling him does mean he may undergo treatment that degrades his quality of life, or even shortens his life.

How can we justify telling him when he's 70, when that won't make him live longer but could well make his life worse?
I might have missed existing discussion, but what is wrong with GPS coordinates? If digits are good enough for NATO fire missions, they're probably good enough for lost hikers.

- They're ubiquitous and do not require a shared codebook. I can find my GPS coordinates on a paper map.

- They are easy to transmit clearly regardless of medium, language or accent. Digits are the first words you'll learn in any language. Pronunciation can't be taken for granted [1].

- They offer unlimited precision, but 10-12 digits are enough to pinpoint your exact location [2]

- They let you see where you stand relative to another person on the same grid. It's a bit like trying to find your friend in Manhattan.

- They let you picture where someone roughly is without even looking at the map. You can perform error correction as the digits are being read to you. If someone is off-grid, you can tell immediately. This scene [3] comes to mind - the officer is calling a fire mission in the wrong country, and everyone can immediately tell.

Take Berlin - 52.5200 N, 13.4050 E: "Five Two Point Five Two North - One Three Point Four Zero Five Zero East".

[1] https://www.youtube.com/watch?v=yR0lWICH3rY
[2] https://xkcd.com/2170/
[3] https://youtu.be/K9uXLzZyucI?t=87
All these interesting theoretical arguments while people are dying in droves... India was EXPORTING vaccine to the UK until not so very long ago. Maybe they don't have the capacity to produce the mRNA vaccines, but they most certainly have the capacity to produce viral vector vaccines such as AstraZeneca or Johnson & Johnson.

I strongly believe it is our moral duty to buy-out or invalidate the IP of (at the very least) these viral vector vaccines lest even more people die unnecessarily, while we are having interesting theoretical armchair arguments from the comfort of our increasingly vaccinated western societies.
https://en.wikipedia.org/wiki/Blindsight_(Watts_novel) explores this idea.
Wrong link on that second one. Here's the right one: https://www.kindredmedia.org/2017/10/capitalism-makes-us-sic...
Where I grew up there were more "tree farms" than housing. Anyone who says housing is expensive because land is finite hasn't driven more than an hour out of the city.