skysight-inc/HackerNews huggingface dataset:
I used to mess with other devs by injecting bits of code from other sources (when blink in html worked it was one of my favorite ones). The correct way is to bind your params and do not trust that the data you got from some other system is 'OK'. What may be fine in one system could be an escape code in another.

I speculate that the reason this is such an issue is because the interface at the ODBC level is basically security wise broken. It works 'OK' for getting/putting the data but it has 2 modes of execution. One of those paths is not great for security, the other has a usage issue. 'Binding' can be a real pain as it takes at least 1 call per variable parameter. Then managing the buffers correctly. So just building up the strings is an easy way to skip a lot of steps. So many take it. But that path leads to security vulins.
I think it can expand well beyond helping immigrants. For instance, I am going relocate to another country, may be your service help me organize various like apartments, legal documents etc. Being an immigrant, I understand the problem. Very excited for you guys.
JDBC does have an option to pass parameters without doing string interpolation and I would not consider it a framework.
Ask HN: Bootstrap or take seed round of 1.5M-2.5M
We have a developer tool (it's a subset of agile PM tools) and have 600000+ total users with 180-225K monthly user sessions, It is offered as a free tool and few months ago we launched Pro/Enterprise plans as well, We still offer 90-95% features as free, Now we generate some revenue not much but we are able to pay all the costs and will optimise our pricing model in next 3-6 months.

We get some interest in the tool from investors and one is offering us a possibility of 1.5-2.5 M USD seed round. Is it wise to take the VC money or should we continue to bootstarp. We do not have a lot of expenses, 4 co-founders (3 developers, 1 marketing) all working part time on this tool along with our day jobs. All the development is done by ourselves.

With VC money we can leave our jobs and focus full time and hire few sales people, but we can achieve the same in 1 a year if we go little hard on free to paid conversion. Also we are based in Europe, and the VC is in USA, should we take money from local VC in Europe or it does not matter.

What are benefits of taking VC money and what are downsides, can some of you really tell us your personal experiences, it will help us to make the decision.

Thanks in advance
Quite a bit of it should be done by the end of 2023, so about 2 and half years from now. It is ambitious but then much can be done, if they really make IPv6 a priority.
Ask HN: Why are you a competitive person?
People who are competitive, what drives you really? Do you feel jealous when you see other people getting successful.

I have never been a competitive person and always cooperated with other people even at the expense of my own success, that's what I want to change that. Any suggestions?
Very disagreed with your analogy. By the time those PHP tutorials were written, SQL injection attacks were already known.

So not sure what you're trying to push here but I refuse to participate.
The facts didn't change. Only the narrative did.
Men’s foil fencer Edgar Cheung bags historic gold medal at Tokyo Olympics
Some interesting apps you have listed in there. Keep it up!
Hmm, many Linux distro are distributed via Torrent. As well as many video platform also use webtorrent. It is a just protocol like http. And when one is downloading a really large file, torrent can arguably be much better than direct download.
So does any activity that produces CO2, including natural forest fires, and breathing.

The whole idea that CO2 is harmful, came from modern scientific knowledge - also part and product of the economy/society. The same economy could come up with solutions e.g. carbon taxes or other tech advances.

You are taking a complex issue, CO2, the economy and its planetary effects, and turning it into a simplified concept of "harm". Humans have consumed some amount of CO2 forever, it's only an issue now because there are significantly more humans (who also create more CO2, but that's beside the point of the first).

In order to survive in growing numbers, humanity will need to manage its CO2. Incidentally this isn't the first time something like this has happened: https://en.wikipedia.org/wiki/Great_Oxidation_Event

Nothing about this the hobo lifestyle suggests it will produce a solution to this problem beyond the fact that it's unlikely to support communities of a certain size for other reasons.
On the topic of leaking HANDLEs, Synergy/Barrier's service leaks zombie processes and causes systems to malfunction over time, and this hasn't been fixed in years.

https://github.com/debauchee/barrier/issues/567
As far as I understand this also plays the other way, because no one endorses each and every effect of the vaccine, therefore no one knows for sure that it cannot cause a problem, and consequently being vaccinated is taking a risk. Am I wrong?
"Nobody is perfect" is always true, but also a common intellectual defence mechanism that is only applied to your ingroup.

When the outgroup shows their imperfections, a whole other set of cognitive tools are used.
To quickly disabuse you of that notion: it absolutely does not work like that.
And yet again: A list of alternatives.

attic (python) - https://github.com/jborg/attic

borg (c) - https://github.com/borgbackup/borg

bupstash (rust) - https://github.com/andrewchambers/bupstash

duplicacy (go) - https://github.com/gilbertchen/duplicacy

duplicati (c#) - https://github.com/duplicati/duplicati

duplicity (python) - https://github.com/henrysher/duplicity

kopia (go) - https://github.com/kopia/kopia

nfreezer (python) - https://github.com/josephernest/nfreezer

rdedup (rust) - https://github.com/dpc/rdedup

restic (go) - https://github.com/restic/restic

rclone (go) - https://github.com/rclone/rclone

rsnapshot (perl) - https://github.com/rsnapshot/rsnapshot

snebu (c) - https://github.com/derekp7/snebu

tarsnap (c) - https://github.com/Tarsnap/tarsnap

I think there are many more out there (https://github.com/restic/others) - I personally use

restic

while technology wise (speed, only restore needs password) i would prefer

rdedup

which is an impressive piece of software but unfortunately without file iterator... :-)
Advanced Groupbys with Grouper, Assign, and Query
That's easy. There is a such law for apartments in Netherlands. In NL you have to report apartment to the municipality if it's not occupied for a year and they will arrange something for you. Sure it won't be very profitable or may be even bad for your property if they rent it out as a social apartment, but you had a full year to find a tenant. If you didn't report and they find out - you'll get a good fine. The reason for all this is that the apartment can be easily squatted. And municipalities are not welcoming squatting.
This story is about shady companies funded by government propaganda agencies around the world, and which cease operating as soon as you start investigating them.

The New York Times has been doing business continuously since 1851, is one of the cornerstones of democracy, a recognized leader in journalism schools across the globe, and to this day regularly fires journalists who are caught lying in a story. Anyone is free to literally walk into its offices at any time without being followed or shot.

It's safe to say there is no comparison here.
Yes, the brake pedal only controls the friction brakes in Teslas. The brake lights come on when a certain amount of deceleration is achieved, not merely based on pressing the brake.

Once you stop thinking of the right pedal as 'gas' and start thinking of it as the 'accelerator' it makes perfect sense. You press down to accelerate, hold steady to maintain a speed (zero acceleration), and lift off to decelerate. The amount you press or lift off determines how much positive or negative acceleration you get. Then the brake is just there for a rare time regen isn't enough (and I go weeks without touching the brake).
F Microsoft! use linux
This is a major geopolitical decission. TSMC is responisble for 1/3 of chips worldwide (in an industry with few players). China's claim on Taiwan has a lot to do with that.
What are the facts that changed, in this lab leak story?

As far as I'm aware, our knowledge of the real-world facts haven't changed -- we're still in a position of great uncertainty. All that's changed is how various commentators are dealing with that uncertainty: they had been downplaying it, now they're acknowledging it.
I know people who came back after having worked a few years in the USA. Seems like a smart move to me, considering how large bay area home prices are compared to home prices in Germany. From my limited point of view, Germany is a way better and way less expensive place to raise your child than the USA. There is way more social peace. You don't have massive gun violence. Etc.

I know people who emigrated to the USA decades ago, and now send their children to German colleges because those are practically tuition free for EU citizens (you need to pay rent tho). If you want to move back more early on, you can use your savings from your time in the USA to get the bulk cost of buying a house in one of the regions with good tech jobs like Munich out of the way. Then you can live a great life in Germany even with the limited German tech salaries.

Note that I'm not saying that you shouldn't go to the the USA in the first place. In fact, I'm still strongly considering it myself. But the less healthy, young, single, and childless you are, the more advantages does Germany have for you.
Agreed. Changing pronunciation mid-sentence to a language you don’t even speak is very difficult, and in any case comes off as pretentious.

Non-native speakers will be used to the English pronunciation, even if it’s wrong. If you try and pronounce the name “correctly”, the chances are you’ll mess it up and cause even more confusion.
Sure certain sounds can definitely be picked by non-native speakers. I'm not an English or German native speaker, but I've learned to pronounce /x/, /ç/, /θ/, /ð/ and the guttural Rs just fine, all sounds I didn't grow up with. It took time, exercise and willpower, and I'm kind of a language nut so I always put in some extra effort to get my pronunciation right. A common person that doesn't know the slightest amount of German is definitely not going to put in the effort to learn how to say [ch] right, just to say "Freidrich".
Wow. https://hn.algolia.com/?q=%09Cognitive+deficits+in+people+wh...
Quick NAT: High performance NAT system on commodity platforms
https://arxiv.org/pdf/2105.03864.pdf

"NAT gateway is an important network system in today's IPv4 network when translating a private IPv4 address to a public address. However, traditional NAT system based on Linux Netfilter cannot achieve high network throughput to meet modern requirements such as data centers. To address this challenge, we improve the network performance of NAT system by three ways. First, we leverage DPDK to enable polling and zero-copy delivery, so as to reduce the cost of interrupt and packet copies. Second, we enable multiple CPU cores to process in parallel and use lock-free hash table to minimize the contention between CPU cores. Third, we use hash search instead of sequential search when looking up the NAT rule table. Evaluation shows that our Quick NAT system significantly improves the performance of NAT on commodity platforms."
$45k is the very definition of "low salary."
Minutes Made Simple
For the most part I agree. But that said, there are definitely exceptions. Some truly world-class scrabble (and poker) players are well-adjusted, nice, friendly people, who seem otherwise normal.
You should read more. Everything fallingknife said is backed up by statements from insiders. As one wrote:

> Stories are chosen and told in a way to satisfy the narrowest of audiences, rather than to allow a curious public to read about the world and then draw their own conclusions.

...

> But the truth is that intellectual curiosity—let alone risk-taking—is now a liability at The Times. Why edit something challenging to our readers, or write something bold only to go through the numbing process of making it ideologically kosher, when we can assure ourselves of job security (and clicks) by publishing our 4000th op-ed arguing that Donald Trump is a unique danger to the country and the world? And so self-censorship has become the norm.

> What rules that remain at The Times are applied with extreme selectivity. If a person’s ideology is in keeping with the new orthodoxy, they and their work remain unscrutinized. Everyone else lives in fear of the digital thunderdome. Online venom is excused so long as it is directed at the proper targets.

https://www.bariweiss.com/resignation-letter
There have been some noticeable stinkers that I have been aware of for maybe 20 years, up to and including the Jason Blair affair. However, I have seen a steep decline in quality since 2010-2012.
My partner and I were recently discussing this very problem. She has extended family in rural Vietnam and she is remitting a substantial amount of money to pay for their healthcare: it would be more cost effective to use health insurance but arranging it from overseas is very difficult due to bureaucracy, literacy etc.

We discussed possible solutions -- hiring someone local who is literate, versed in health insurance etc. -- to manage the process for her, and so InstaKin is exactly what we need, but healthcare (for example) is an ongoing process and needs ad-hoc support when filing claims. Do you see InstaKin as capable of supporting this sort of need, or is it for more transactional and easy to validate needs? Do you have a long term vision that better supports this type of need?

Thanks,
System 76. They focus on linux systems which means they have done the work to ensure the hardware has drivers. Dell, Apple, Hp, and Lenovo make some nice computers, but they have a tendency to change what is inside a computer without changing any model numbers so you never can be sure it will work with linux. It works with Windows (except Apple) so they don't care that it isn't useful for you.

None of the above is fatal to the others (and you can get linux preinstalled from some of them which sidesteps this), but it is easier to just go with something that works.

Whoever you buy from, make sure you get a business class machine. You can save a ton of money on consumer grade equipment. However the quality is lacking and it won't survive drops (this is mostly a problem with laptops)
This is how you end up with people degrading their system's security overall, which is what you really don't want.
Truth didnt
I have friends that do this selling crappy financial products while wearing a suit IRL. It’s really hard to look the other way.
Being dragged 80ft because you're voluntarily doing something against the rules (don't attempt to board a moving train is like 1950s level workplace safety stuff, everyone has it on the books) isn't considered an event worth mentioning in the kind of workplace where people get turned into pancakes if they're not careful.

It was 2001, OSHA was much more amenable to internal handling of these kinds of things back then.
> People, even young people, can die from Covid.

In vanishingly small numbers. But sure let's use hyperbole for everything in order to have a sane discussion.
> This reminds me of the story of the town of Versailles, Indiana.

Detroit would be the same way if it wasn't such a big city.
Easier to see when you add back the accent, Détroit.
Here in Missouri (or rather in Missourah country), we have a ver-SAILS, MAH-l'n (Milan), New MAD-rid (Madrid), BALL-ah-ver (Bolivar), and La PLATE-ah (La Plata). :)
What I'd love is changing the road safety rules in favor of bikes (because bikes lanes can't do everything, sometimes they are terrible or not existing)

1. High priority vehicles firemen/police/amulance
2. Shared transports (bus/tram)
3. Bikes
4. Other motorized vehicles - cars

Also reducing drastically driving speed to reduce risks
That's a pretty clever name.
Why do agile-folks seem to hate product managers so much?

This comes out in #13, #19, and #20 (well depending on exactly what they mean by "managing".) I find it really helps to have someone dedicated to the product side, so they can help with prioritization, generating ideas for what to try next, keeping track of the research, and tracking the launch process and metrics.

We could, I suppose, distribute all of that to the engineers, but there's value in that specialization.

(I generalize to "agile-folks" here because I feel like I've seen this before, but I can't think of exactly where.)
Show HN: Startups of the Year 2021
Read Something Great - articles from the belly of the internet
BLAKE3 1.0
Just planning ahead. Musk knows that soon he'll be on Starlink 5, completely blocking out the sun and moon. Why bother with programming a workaround for an issue with a better solution coming!
Doomsday Music Vault to Be Constructed in Arctic Island Near North Pole
> Freedom of choice can only extend to actions that have no effect on others.

As far as I know you are still free to drive a car even though you a good chance to kill people with it every single day.

Bad reasoning.
In English the /v/ in the phonetic spelling [edit, was: transcription] vee usually represents a voiced labiodental fricative (as /v/ in Italian Vincente) whereas most Spanish speakers will pronounce v (just like b) as voiced bilabial fricative or approximant. That is, I'd expect Vicente to be phonetically spelled bee-sen-teh (well aware that English /b/ is not a fricative as Spanish /v/ and /b/).
That might be true, but let's be real here: torrents are overwhelmingly used to pirate software/videos/music. The categorization is "potentially unwanted", not " definitely unwanted", so I think the classification is justified. Also, despite "linux iso torrents" being a meme in many circles I have rarely actually used that to download isos. The default option of http is almost always fast enough and the increased hassle of booting up my torrent client isn't worth it.
Do other tv/cable news networks print retractions? I can't remember any, but maybe they have a specific webpage you have to go to in order to see it? I doubt any of the non-news programs on those networks do, and those comprise the majority of the programming. So maybe it's just hard to find for the little bit of actual news.
Kiruna: A Mining Town on the Move in Northern Sweden
I'm not sure if this quite matches your request (I suppose much hinges on the word "important"), but here's a story of a fairly famous and long-standing error: https://www.jamesrmeyer.com/ffgit/godel-error-2.html
Personally, I'd say the fact that someone bothered to discover it was false fifty years after it was published shows its importance.

The short version is that Gödel claimed in a paper that he had an algorithm to determine satisfiability for a certain logic, but the algorithm actually worked for a slightly different logic instead. People basically took Gödel's word for it for fifty years until a logician called Goldfarb found the mistake.

EDIT: As a disclaimer, I don't have any association with or endorsement of the website I've linked to. I found it just now because I needed a source for the story that I've known for many years (I think I first heard it in person, but it's definitely contained in the book `The Classical Decision Problem' by Börger, Grädel and Gurevich). I skimmed the post and it seemed to cover the relevant details, but that's the extent of my knowledge of the site and its contents.
Where do you have apples-to-apples comparison? As far as I know, this does not exist.

NHTSA is investigating Tesla, some 20-30 accidents. If they find that Tesla is doing something seriously dangerous, I'm sure they will force Tesla to take corrective actions.

The same applies to European regulators.
One small externality of Amazon's approach to business optimization: Amazon so closely tracks its drivers that they're strongly incentivized to shave seconds off of every delivery. When they come to smaller apartments with push-button buzzers, they'll push every button immediately, not just the buzzer matching their package. It disturbs every occupant, but there's the chance that they get buzzed in a few seconds sooner because a different tenant is hoping for their own package, is expecting a guest, or accepts that this is how Amazon works.
What's "the union"? I never heard about it. Not a single engineer that i know personally is in this union(or at least they are hiding that). And literally all of them planning to leave Germany once the good opportunity arrives. Also, i know personally almost 20 engineers who left the country only for better pay and that's during pandemic only.
I am kind of sceptical of these verified-mathematics projects in the sense that my litmus is whether I could easily verify my workings rather than the proofs I rely upon, but nonetheless I have enormous respect for those doing this work and really hope it comes to fruition.

I really hope this work trickles down to our programming - state machine problems are basically "solved" (for my needs at least), but more complex programs are really hard to prove.
Well you'd really have to be crazy to try and torrent stuff on a Windows machine nowadays anyways. That's just getting on your knees and begging for malware. Maybe this will help some of the more savvy users realize that Windows should be relegated to a virtual machine for when you need a specific Windows app that doesn't run under Wine, and never given access to real hardware. I only use my Win10 VM for compiling stuff with MSVC that refuses to build with MinGW.
AI Will Help Keep Time at the Tokyo Olympics
Ask HN: What are the best alternatives to Robinhood and Webull?
Hi Hacker News community!

I am a Dutch student and recently relocated to the US. Back in the Netherlands I used to trade via Degiro (some stocks and super limited options trading), which was not even commission-free for the stocks. After moving to the US and trying Robinhood and Webull I fully realised how terrible Degiro actually was..

To my surprise I keep hearing that there might be even better retail brokerages than what I'm using now. Would be glad to hear your suggestions!
I don't think this is fair to MacOS. Millions of people are very happy with how it works in its highly integrated but restricted fashion. While it's not the choice for you and I, I think credit where credit is due is important here.
More Variants Are Coming, and the U.S. Isn’t Ready to Track Them
I don't know any Rust, and that thing made perfect sense to me (compared to other things in Rust).

How would you have preferred it looked?
This is a beautiful video!
What is Zionism to you ? The word means different things to different people. Bernie Sanders is (according to him) a Zionist, is he a thieving murderer?
Algorithm May Help Autonomous Vehicles Navigate Narrow, Crowded Streets
Would you want to do a mom and pop hop?
We use this internally to help prevent leaks:

https://github.com/Microsoft/wil/wiki/RAII-resource-wrappers
Honestly I still miss Gobe Productive. Fantastic productivity suite. Not very full-featured, but everything just came together in a smooth way I haven't seen replicated since.
OP may be exaggerating a bit with their claim that Haiku isn't an OS, but what is important is their frustration. Haiku is billing itself as an OS that runs on PCs and parent is frustrated because it has never run on any PC they have tried it on. That's the thing to take away here. Either they should make it more explicit[0] what it does and doesn't run on, or work harder to support more hardware. Pointing out that it is clearly labeled as beta software and linking to the compatibility list are reasonable responses, but there's literally a comment telling them to 'shut up and get your shit together'. That kind of defensiveness is not useful to anyone.

[0] since there appears to be a list of known good hardware, maybe it should be prominent?