skysight-inc/HackerNews huggingface dataset:
Enlightenment from an acid trip. This guy just reminds me of my friends who took too many psychedelics and didn’t mature out of the stage in life they were in when they took them.

We have a word for this: fried.
Tesla AutoPilot – I give up, it's downright lethal
This is a thoughtful answer. I should be clear that I draw a bright distinction between young traveling punks sleeping rough (often by choice) and people who are long-term homeless not by choice. I knew a lot of the former, but only encountered some of the latter as the graybeards in mostly young communities. And I'd say most of them still had some choice, they just didn't see a reason to go back to normal society.

I'm just objecting to the glorification of homelessness as an ethos, and the diminution of people who work as a consequence. I'm not saying the ethos is responsible for all or even most homelessness. It can, and does, draw some intelligent people into making really bad decisions, though.

I'd also add that I've known many people living rough who were happy to have work, and worked hard when they could. And I don't include them in any of what I'm saying about the ethics of surviving on other people's charity, because they indeed did not wish to.
Marketing is mostly convincing people to overpay for things they don’t need. How can you not understand the disdain for it?
Silicon Valley goes beyond tech with finance being a solid example. In the end many people are getting rich from other industries as all cities need a wide range of services like plumbing and heating/AC which opens up a lot of opportunities to start and grow a business in those industries.
Imagine seeing this in your search results:

In order to show you the most relevant results, we have omitted some entries that contain shitty code and bad security practices. If you like [repeat the search with the omitted results included].

I can't imagine this being controversial. No one would complain at all about being affected.
Interesting. Why don't mesh networking projects switch to this?
The study of markets is economics. Marketing is advertising. Disagree hard.
Football Fantasy View
Personally settled on:

https://github.com/airsonic

Its containerless :D and runs anywhere Java is installed.

Also evaluated:

https://github.com/ant-media/Ant-Media-Server
> I wouldn't be surprised if some dark corner of the docs still had those available.

It's not exactly a dark corner, but at least there's red boxes all over the place.

Back in the 5.x early days it had disclaimers but clearly not enough to discourage people from keeping unsafe code in place.
Yes. Not to mention that a director or a VP role has usually rather little to do with managing specific people directly, it's more about setting the culture, approving specific decisions and occasional big organizational re-wirings.
We also don’t know if rocks feel pain, but it’s a safe assumption since we don’t see them attempt to avoid being destroyed.

If you try to cut an animal, it runs away or fights back. If you try to cut a plant, it sits there are lets you cut it. A plant may have some electrochemical response to ensure that a predator doesn’t kill it (which could simply be the result of natural selection), but that isn’t good evidence for us to even begin to entertain the idea that a plant feels pain.

In the absence of evidence, we shouldn’t make up wild ideas that don’t fit our best current understanding.
Certain people just aren’t “real programmers”. I worked with a guy who would cut and paste some example and change a couple things, and respond with “I got this working”

Meanwhile I would said okay, what does it actually do, where’s you copy it from, what did you change and why...

At this point he would just get mad at me. I'm sorry I don't want people cutting and paste code they don't understand and sticking it in our codebase.
Beat me to it. I'm astonished it's that low, and I suspect that if you look at books on PHP programming that are currently or recently "in print" you'll find a lot of examples in early chapters that do exactly the same thing.
I use a very similar flow. The highly-opinionated-yet-effective pattern I use involves pydantic, cleo, and entry_points/console_scripts in setup.py.

- everything is structured as a module

- options and args are stored in their own module for easy reuse

- the whole stack has one cleo.Application, with however many subcommands. Usually of the form "mytool domain verb" e.g. "mytool backend start."

- cleo args/options are parsed into pydantic objects for automatic validation (you could do this with argparse and dataclasses to skip the deps but it's more work)

- each subcommand has a `main(args: CliArgsModel)` which takes that parsed structure and does its thing. This makes it super easy to unit test

I install into a venv with `poetry install` or `pip install -e` for editable installs.

It all just works, no fuss, and so damn modular.
I agree that it’s a bad look when the influencers don’t disclose this.

They should have done it like the gov does PSAs. Get the word out, evangelize, and realize that some people for their own reasons will willfully remain “pagan” and and there is little you can do to convert them.
> I'm not sure what type of compiler to label that as, but that's the goal.

A compiler. From TypeScript to web assembly.

Certainly it has its work cut out for it to have TS semantics (that is, JS semantics) and be optimal for target web assembly.

I can't think of any scripting languages that are optimal for targeting low-level runtimes.

I wish AssemblyScript the best; seems like a hard problem.
I agree...it's easy to not notice I think, but I definitely have the same impression that the aggregate mental health of internet users is degrading in various ways. The mind ingests a massive number of variables as it renders reality, we have pretty decent (if primitive) knowledge of the flaws in this device, and the number of changes in the system in the last few decades is substantial...who knows wtf is really going on inside the 7 billion black box reality machines out there! What we know for sure is that there is major malfunctions going on anywhere one looks, and that's only the ones we are able to see.

I think running a similar analysis as this (and other analyses) on the last 10 years of popular mainstream subreddits would yield some interesting results.

Or, perhaps a new meta-social-network of some sort will appear on the scene that can point a portion of our massive biological compute power at the phenomenon and try to gain some understanding of it. I worry that if something isn't done, the system might start falling apart.
Running is super difficult to get right because most surfaces are too hard and runners seldomly have a proper form.

My dad was an elite athlete who ran for the national team. By age 50, many of his cartilages were worn out and he experienced extreme pain while doing daily chores.

He says you should only jog on grass or sand.
Summary of the study based on the comments I've read so far: "People are saying 'I am a...' a lot more than they used to, which proves that the world is going to shit because most people haven't been paid what they're entitled to for their whole lives"... this "study" seems like absolute trash science, someone's opinions and narrow interpretations dressed up as some kind of higher form of knowledge.
Why did you decide to have the life/electricfication spread so slowly relatively to the geological time scale? Was it just to better visualize the changes?
Subtle impact is always a given as people affecting their own understanding affects their actions, and their actions shape the reality around them.
Straight lying is tough sometimes

Reality often dictates that you must lie

Think of a politician that does not lie

They know we hate truth tellers

Ditto hiring managers
Is it true that they will put ads on your video whether you want them or not?
That's not a real situation that will arise, so it doesn't matter.
When half the USSC judges are parachuted political operatives, the average HN commentator's opinion on the law is about as persuasive.
To be fair to PHP, a lot of other languages had bad examples around as well. Pretty much every language has a way to do string interpolation on untrusted input and pass it to to a database .
And yet most people in the US seem to think there's a single British accent, which is simply not true. Maybe if they heard a scouse, or geordie, or black country, West country, bristol, etc. they wouldn't even recognise it as a british accent
Your regimen sounds great. Agreed, it's hard to get people going, but once they're going, they should be encouraged to advance.

Running is mostly a solitary sport. Lifting can be communal.

Slow and steady does it. If you hurt yourself by overdoing it when you are getting old, it will take much longer to recover.
A road race involves people traveling over dozens of kilometers, with many spectators lining the streets. There are so many ways a spectator can signal something to a rider in code (color of hat, waving or not waving a flag / choosing what flag, shouting something as they pass, etc.).

Sometimes a spectator might just say something about "oh that group a couple minutes before you looked fast" and not even be part of a team.
> The team also used machine learning to identify patterns in the signals.

> he results showed a clear difference between the signals before and after attack.

If they didn't use a rigorous separation of train, test and validation sets, I'm skeptical that this might have been overtraining.
You can employ a professional property manager to deal with the hassle of tenants.

Your one property (or a few properties) being empty isn't moving the needle enough in terms of the price of real estate to make up the difference from lack of rent.
> However its hard to find any big companies here that uses PHP

There's one pretty big one....Faceledgar? Peoplebook? Something like that.
Why is what tether did (held 76% of its reserves in cash and cash equivalents and other short-term deposits and commercial paper as of the end of March, as opposed to 100% backed) any different to fractional reserve banking?

The minuscule fine ($18M) shows that the AG didn't even really think it was a big deal.
We can trust in the earth if we pay our respects to her.
Saudi Aramco admits data leak, blames third-party contractors
What I'm saying is when the largest trial and the one with probably the most leverage in the meta-analysis included turns out to be completely fraudulent, it doesn't bode well for that not being the case for other included trials. This one was 'preregistered' after data was collected among other major red flags and shouldn't have passed QC. That is the type of bias/error that can't be accounted for in the analysis itself.
The 1.111B class of $0.99 .xyz domains white paper
The good lesson it can teach is that there are hypocrites in the world, and that at the present time there is enough excess productivity in the system that people who contribute nothing can basically ride for free, and the value they contribute is that they serve as props for a fantasy discussion that is delusional at best.
It if were Nassim Taleb advice, it'd use 10x the number of words, and glorify Nassim Taleb's advice given by Nassim Taleb.
Do you think that particular model would still stop, if some DIY hack had "hotwired" the button inputs to its controller?
Pronouncing non-English names for English speakers
https://stackoverflow.com/questions/5741187/sql-injection-th...

It's still not safe
Agreed. It feels very "one-size-fits-all" in a technical landscape that is constantly changing. Some products are exponentially more backend-focused (twilio), some exponentially more frontend-focused (salesforce?). I don't know enough about other departments to say for sure if these are universally valid numbers, but I doubt it.

Definitely worked for enough C-level people who said "We now need a 6-person data team in our startup because my friend Bob said so, and he's a big deal" or whatever the trend of the day was, to find such prescriptive templates questionable at best and dangerous at worst.
Ask HN: Do you admire Chinas's willingness to smash a company they deem 'wrong'?
It's nowhere near as bad as you're making it out to be.

As a Brit, we get a ton of American TV and no-one bats an eyelid understanding flashlight, sidewalk, apartment, etc.
We know - they're on strava
This reminds me a lot of one of the locations in (one of the expansions of?) Pillars of Eternity 2. https://pillarsofeternity.fandom.com/wiki/The_Scriptorium
What if the only sympathetic media is decried as bigoted or [insert-your-favorite-whatever-ist] as a result (or is already known as such)? Then it stops being "corruption" and is seen as heroic.
A lot of lamps in the past had little cut-off, sometimes sending light straight up.

New designs, especially Dark Sky approved ones, tend to concentrate a lot more light straight down (0˚), with some spill over over out to 60˚ to the side, but having a hard-ish cut-off by 80˚.

If you simply do a 1:1 replacement of street lamp heads, the new more narrowly-focused units will of course not "splash" light as far—but who wants to install new poles for the new design?
This is more propaganda touted by the same groups as the ones spewing Setch Rich conspiracy claims. Sigurdur was not a key witness. The indictments do not rely on his evidence. Go look at the FBI statements if you don't believe me. Even if he was a key witness, you don't think law enforcement has ever dealt with a witness retracting a statement that they agreed to in exchange for a plea deal or immunity? It wouldn't simply invalidate their statement. Prosecutors plan ahead for things like witnesses dying during trial. Seriously, I've seen this same propaganda being pushed here already based on the same theory that Siggi was holding the entire case together which is just false. It is actually pretty funny... I imagine prosecutors seeing this laughing, saying.. we should use this tactic more where we make people think the case is falling apart, maybe we can get more evidence of crimes in the process of people letting their guards down.
Just from the name of the project I expected an Apache module for producing content for Google AMP.

Knowing how popular AMP is here, I expected some "interesting discussion".

But instead it is a nice, portable web-based media player that I may actually install on my server.
If they really wanted to “change the path” of the folks they identified, perhaps they should be contacting them with letters instead that say congratulations we have secured you a 6 figure job with full benefits.

Nope instead the efforts aren’t to help anyone just to actively surveil them…assuming these systems were accurate and these were at risk folks, how exactly is surveillance helping to change their path?

Maybe the citizens should collectively send some letters to the individual LEO in charge congratulating them on being identified as the mostly likely to violate civil rights and placed in a project where they and their families will be under 24/7 surveillance.
Not sure how this was made. But this looked very impressive to me: https://www.youtube.com/watch?v=uD4izuDMUQA
Necessary but not sufficient. Those are issues that can plague all studies, but at least some sources of bias and error can be mitigated against with randomisation and blinding.
Did you by any chance try Funkwhale[0]? Seemed like a pretty good option

[0]: https://funkwhale.audio/
In my experience at SAAS companies, one or two teams alone are responsible for "This huge integration that's gonna change everything I swear! Trust us Yahoo JAPAN is BIG"

I've also usually noticed a lot of inefficiency on the dev-side too (bike-shedding, over-engineering, rewrites).
Do people actually think those who are learning PHP by searching Google for tutorials are going to be creating production ready applications that would be so critical that a simple SQL injection attack would be so catastrophic to?

Abso-freakin-lutely. It may not be direct copy pasting of code, but often it'll start as that then be tweaked as appropriate for the project at hand.

Even programmers not doing this are frequently going back and looking at their own code doing similar things or other similar code in codebases they have access to (eg internal libraries). Better programmers will do similar things but also recognize the flaws in what they're using.
Could someone add some references to more advanced reverse engineering resources? I was sold a bot that was closed source and ran it in a VM and then recompiled it using Ghidra. It ended up being malware because it tried to execute a function called sendToEmail() which basically just sent decrypted wallet info to the malware writers email address (hardcoded, of course).

I wasn't able to arrive at this conclusion by reverse engineering the code - it only happened to crash suddenly when it started to execute the sendToEmail() function. (Lucky me!)
There’s a difference between what you encourage and what’s technically possible. PHP code so commonly has bugs of this class because there’s a quarter century of tradition, examples, and tutorials normalizing the idea of taking request variables and passing them directly to other code. Contrast with something like the Django tutorials & docs where the examples pervasively use the ORM’s escaping & validation and the extension points describing how to use custom SQL tell you to use placeholders and emphasize why it’s important.

That might not seem like a lot at first thought but it lowers the bug frequency enormously in the code I’ve looked at because you only need extreme caution in rare cases rather than every view. That means that when someone is busy, having a bad day, etc. they either have no problem or it’s a safe crash rather than an exploitable hole.
> So let's not continue to believe the Grimm-esque fairy tale that poor people are poor because they're lazy or stupid. And that all homeless people are drug-addicted, mentally impaired losers.

Also, substance abuse can be an outcome, not just a cause. People go homeless after getting addicted, yes, but people also get addicted in order to numb the experience of being homeless too. Using drugs is a reasonable response to a loss of hope; I’m sure every single person here has some experience with increased alcohol consumption as a response to stress. It’s perfectly human, and most of us wouldn’t do any better if we were homeless tomorrow.

Also, this attitude is never applied to the rich and powerful addicted to things like cocaine. Which is kind of curious. It makes you wonder if the issue isn’t drugs at all..
copy & paste ... ha I wish. We had to type it bit by bit from the back of a magazine back in my day. Do you remember this? [0]

[0] https://arstechnica.com/staff/2018/11/first-encounter-comput...
Deploy Static Website to AWS
It may have but this research doesn't show that. It appears to be in questions, rather than answers, when I can find a page that hasn't been removed. Beside most of these not actually being there, the google result is for answers which additionally have been ranked by Google. The thing you link is not meaningfully comparable to the Google result, nor is it representative of 'if you search for something on SE, how often does it tell you to put SQLI in your code'.
The existence of `innerHtml` or `eval()` or `exec()` etc isn't the problem itself.

After all, you could implement the exact same thing in userspace.

But yes, anytime you have one program writing instructions for the other, you wind up with a risk for bad composition of those instructions.

Fortunately, frameworks and libraries (for SQL and HTML) are increasingly successful at adoption and removing the risk of the programmer using low-level unsafe primitives.
> Let's take the function browse_draw_mtime() and start picking nits :-)

Let’s…not? I don’t see why you would read “this code is nice and well commented” and immediately comb the code to try to find dubious “bugs” with it? It might have been mildly relevant if you responded with “no, I don’t think the code is actually that readable, for example look at this part” but to jump in when nobody made any assertions of correctness or safety and then bring up minor problems is just strange. If someone says “I think she is very pretty” do you respond with “let’s look at her parallel parking skills, shall we? Eh, I’ve seen better”?
I like this comment. The archetype of the bootstrapped "lifestyle" software company is quite popular on HN, and for good reason, and venture capital often the subject of (often well-deserved!) criticism; but hey, the VC business model exists (and produces some spectacular successes) for a reason.
Wildly anecdotal, but I ask a lot of people in my daily life whether they got/will get the vaccine, and I've noticed a relationship between lower (apparent) intelligence and refusing to get the vaccine. There's definitely a conformist/"uncritically accept the consensus" mentality you sometimes see among some pro-vaccine people, but the anti-vaccine people just make spectacularly bad arguments. One taxi driver told me she didn't like the vaccine because of overpopulation and maybe we should cull the herd of older people anyway; another said he "heard somewhere it was made from aborted fetal tissue."

I don't think this would be enough to account for the effect sizes described in the article; it also wouldn't explain the correlation between disease severity and lower IQ (although maybe that starts to come in when you compare the severity of breakthrough cases vs. the severity of cases among people who didn't have the vaccine at all). But maybe it contributes.

One reason to doubt the idea is that a huge share of your chance of refusing the vaccine has to do with your alignment in the whole left/right culture war thing that is going on. And the IQ difference between conservatives and liberals has been found to be pretty small if any.
Oh funny story. I have a .tk domain with freenom (used to be with dot.tk before the Dutch invaded, I guess) that was a free domain and I broke the ToS by not setting an A record for it. Unfortunately for me I had an MX record pointed to my email and some low value accounts registered to it that were now locked out to me.

Determined to get this domain back, I tried all email contact methods and this failed. Never once received a response to an email asking for help. However, I did search around and discovered a phone number.

This began months of me calling this number and speaking to the same Dutch woman asking about unsuspending this domain so I could purchase it. Every once in awhile I called her back during Dutch business hours (so late night for me) and had a conversation with her about it. Finally after around 4 months of persistence I got the domain back and was able to register it.
There’s a large (the vast majority), who think what is happening to Assange is a travesty.

Many of those same people don’t do anything about it. They still vote the same exact way they have for 15-20 years, they don’t get active and write anyone, etc.

The real travesty about Assange is that he’s not even a US citizen. He tried to reach out to the state department to redact sections and they refused to respond. Then they go after him for publishing what some other person leaked. Not only that, but the leaker had a publicly funded transition and a short prison sentence. Assange is charged and has endured much worse.

My principles (and many others) still stand. But our “deep state” doesn’t represent the majority.
I run an email forwarding service for custom domain (https://hanami.run) and I have to ban the usage of those “free” domains. they are a frequent amount of spam. those users also never paid. none of them.

So i ended up just prevent signed up with those tlds or add those tlds into our system
It's 5k/mo/tent, not 5k/mo total.